ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework
Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework 5.5.4: Technological context component

What does 5.5.4 require?

The technological context documents the organisation's IT components (physical components, applications, services) and its own rules and best practices for using them, drawn from the technological architecture and the risk analysis. It lists the IT components relevant to application security, the risks they bring and the security requirements mitigating those risks, written specifically enough to drive ASCs, and shows which components can support ASCs that need technical support.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27002:2022 · 1 control

  • 5.9 Inventory of information and other associated assets

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.