ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework
Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework 5.5.9.3.2: Reference model activities

What does 5.5.9.3.2 require?

The reference model lists activities in detail, and only those activities may be used as the timing (when) attribute of an ASC, using the standardised list in ISO/IEC 27034-5-1. The activity areas are application provisioning management; application operation management; preparation; outsourcing; development; acquisition; transition; utilisation; archival; destruction; application provisioning infrastructure management; application operation infrastructure management; disposal; application provisioning audit; and application operation audit, each tied to the relevant ISO/IEC 12207 or ISO/IEC 15288 processes and optionally subdivided (for example initiating, planning, execution, monitoring and control, closing). Changes during operation are initiated by the application owner, who provides the ISMS with assurance that application project governance is addressed.

Maintained by Gerard Blokdyk

Other controls in Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework controls