PECB CourseInformation SecurityFoundationISO/IEC 27034ISO/IEC 27034 Application Security Foundation
Understand the fundamentals of application security management based on the ISO/IEC 27034 standard.
Course Description
This foundation course introduces ISO/IEC 27034, the international standard for application security. Participants will learn the fundamental concepts of integrating security into the application lifecycle, including the Organization Normative Framework (ONF) and Application Normative Framework (ANF).
Who Should Attend
- Application developers and architects
- Security professionals involved in software development
- IT managers overseeing application security
- Quality assurance professionals
Learning Objectives
- 1Understand the ISO/IEC 27034 framework and its components
- 2Learn the concepts of ONF and ANF for application security
- 3Identify how to integrate security into the application lifecycle
- 4Recognize Application Security Controls (ASCs) and their role
Prerequisites
- No specific prerequisites required
- Basic understanding of software development processes is helpful
Course Modules
Day 1: Introduction to ISO/IEC 27034 and Application Security Concepts
Fundamentals of application security; the ISO/IEC 27034 multi-part standard structure; application security risks and threats; the business case for secure development; and the relationship between ISO/IEC 27034 and ISO/IEC 27001.
Day 2: Application Security Frameworks and Certification Exam
Organization Normative Framework (ONF); Application Normative Framework (ANF); Application Security Controls (ASCs); application security lifecycle; integration with SDLC; and the Foundation certification exam.
Exam Details
Duration
1 hour
Format
Multiple choice (40 questions), closed book
Passing Score
70%
Retake Policy
Free retake within 12 months after first failure
Available in:
Certification
PECB Certified ISO/IEC 27034 Foundation
Issued by PECB
Digital Badge & Verification
Verified via Credly
Upon passing the exam, your certificate will be issued as a digital badge via Credly. This badge can be shared on LinkedIn, embedded in your email signature, and verified by anyone at any time.
Share this course
Related Courses
Continue your learning journey with these related courses.
ISO/IEC 27001 Foundation
Information Security
Learn the basic elements to implement and manage an Information Security Management System as specified in ISO/IEC 27001.
ISO/IEC 27001 Lead Implementer
Information Security
Lead the implementation of ISO/IEC 27001:2022 ISMS with expert knowledge in planning, risk assessment, control implementation, and certification audit preparation.
ISO/IEC 27001 Lead Auditor
Information Security
Develop the competence to audit an ISMS and manage audit teams by applying widely recognized audit principles, procedures, and techniques per ISO 19011.