ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework
Clauses 5.1 to 5.4: The ONF, its purpose and principles, and the ONF management process – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework 5.4.3: Establishing the ONF committee

What does 5.4.3 require?

Managers define the roles and responsibilities of ONF committee members, appoint a person to each role, formally give the committee the job of setting up and keeping the ONF current, and announce that mandate, make the committee accountable for the ONF's implementation, quality and use, and give it the resources and the authority for internal communication it needs. Auditors verify from official management communications that each of these outcomes was achieved.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-218 · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Clauses 5.1 to 5.4: The ONF, its purpose and principles, and the ONF management process – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.