ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework
Clauses 5.1 to 5.4: The ONF, its purpose and principles, and the ONF management process – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework 5.3: ONF principles

What does 5.3 require?

Those who create and maintain ONF components and processes follow five principles: contents fit what the business actually needs; every element in the ONF is approved by the ONF committee; contents are available and communicated organisation-wide; the ONF is reviewed in response to the continuously changing threat context; and the ONF is auditable.

Maintained by Gerard Blokdyk

Other controls in Clauses 5.1 to 5.4: The ONF, its purpose and principles, and the ONF management process – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework controls