ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework
ISO/IEC 27034-2:2015 describes the Organization Normative Framework for application security: the committee that owns it, the management process that designs, implements, monitors, improves and audits it, and the context components, repositories, ASC library, life cycle models and processes it holds.
ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework is a compliance framework from International with 2 domains and 24 controls. The largest domains are Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework (14 controls), Clauses 5.1 to 5.4: The ONF, its purpose and principles, and the ONF management process – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework (10 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (2)
Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework
Clauses 5.1 to 5.4: The ONF, its purpose and principles, and the ONF management process – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework
What is ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework and who does it apply to?
ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework is a compliance framework from International with 2 domains and 24 controls. ISO/IEC 27034-2:2015 describes the Organization Normative Framework for application security: the committee that owns it, the management process that designs, implements, monitors, improves and audits it, and the context components, repositories, ASC library, life cycle models and processes it holds. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework actually require?
ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework has 24 controls organised across 2 domains. The largest domains are Clause 5.5: ONF elements (context components, repositories, ASC library, life cycle models, processes) – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework (14 controls), Clauses 5.1 to 5.4: The ONF, its purpose and principles, and the ONF management process – ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework (10 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework do I already cover?
ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework?
Start your ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 24 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,048 frameworks.
Get Started Free →Free forever, no credit card required