PECB ISO/IEC 27034 Application Security Foundation

Participants will also learn how to verify and align application security practices with organizational objectives and regulatory requirements , including how to tailor an Application Normative Framework (ANF) to define the necessary security controls and processes that help each application meet its Targeted Level of Trust (TLT).

The ISO/IEC 27034 Foundation training course enables participants to understand the fundamental concepts and principles of application security, as well as the structure, components, and requirements of ISO/IEC 27034. This course is designed to prepare professionals to support the implementation and maintenance of application security throughout the software life cycle.

By attending this course, participants will learn how ISO/IEC 27034 aligns with other standards, understand key security principles such as confidentiality, integrity, and availability, and gain insight into the roles involved in managing the Organization Normative Framework (ONF) and Application Normative Framework (ANF).

By the end of this training course, participants will be able to:

• Describe the structure, scope, and components of the ISO/IEC 27034 series and understand how it aligns with and complements other standards and frameworks

• Identify and explain key concepts and principles such as confidentiality, integrity, availability, threats, vulnerabilities, and risks, and understand their relevance in securing applications throughout their life cycle

• Explain the roles and responsibilities in establishing and maintaining the Organization Normative Framework (ONF) and Application Normative Framework (ANF)

• Describe the processes for validating application security requirements, assessing security risks, verifying security controls, and using KPIs to support continual improvement of application security practices