ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework
Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework 5.5.9: Application security life cycle reference model

What does 5.5.9 require?

The reference model is the standard model against which the organisation maps its own application life cycles so that it can say uniformly when, and by whom, each ASC applies. It supplies allowed values for the when attribute and a reference for roles, helps validate the organisation's life cycles, ensures security is addressed at every stage, lets existing life cycles be retained, and allows ASCs to be aligned between teams and shared between organisations. It has two horizontal stages, provisioning (preparation, realisation, transition) and operation (utilisation and maintenance, archival, destruction), and four layers: application management, application provisioning and operation, infrastructure management, and application audit.

Maintained by Gerard Blokdyk

Other controls in Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework controls