Back

ISO/IEC 27034-1:2011

Information technology -- Security techniques -- Application security -- Part 1: Overview and concepts

General information

Valid from 21.11.2011
ICS Groups
35.030 IT Security
Directives or regulations
None

Standard history

Status
Date
Type
Name
08.01.2014
Corrigendum
ISO/IEC 27034-1:2011/Cor 1:2014
21.11.2011
Main
ISO/IEC 27034-1:2011
ISO/IEC 27034 provides guidance to assist organizations in integrating security into the processes used for managing their applications.
ISO/IEC 27034-1:2011 presents an overview of application security. It introduces definitions, concepts, principles and processes involved in application security.
ISO/IEC 27034 is applicable to in-house developed applications, applications acquired from third parties, and where the development or the operation of the application is outsourced.

Required fields are indicated with *

*
*
*
PDF
254.36 € incl tax
Paper
254.36 € incl tax
Standard monitoring
English (PDF 518 KB)

Related products

Corrigendum

ISO/IEC 27034-1:2011/Cor 1:2014

ISO/IEC 27034-1:2011 - Corrigendum
Newest version Valid from 08.01.2014
Main

EVS-EN ISO/IEC 27001:2017

Information technology - Security techniques - Information security management systems - Requirements (ISO/IEC 27001:2013 including Cor 1:2014 and Cor 2:2015)
Withdrawn from 15.08.2023
Main

EVS-EN ISO/IEC 27001:2023

Information security, cybersecurity and privacy protection - Information security management systems - Requirements (ISO/IEC 27001:2022)
Newest version Valid from 15.08.2023
Main

EVS-EN ISO/IEC 27002:2022

Information security, cybersecurity and privacy protection - Information security controls (ISO/IEC 27002:2022)
Newest version Valid from 01.12.2022

Customers who bought this item also bought

Main

ISO/IEC 27034-3:2018

Information technology -- Application security -- Part 3: Application security management process
Newest version Valid from 22.05.2018
Main

ISO/IEC 27034-2:2015

Information technology -- Security techniques -- Application security -- Part 2: Organization normative framework
Newest version Valid from 28.07.2015
Main

ISO/IEC 27032:2012

Information technology -- Security techniques -- Guidelines for cybersecurity
Withdrawn from 28.06.2023
Main

ISO/IEC 27037:2012

Information technology -- Security techniques -- Guidelines for identification, collection, acquisition and preservation of digital evidence
Newest version Valid from 15.10.2012

Standards designation

EVS Estonian standard
EN European standard (published by an CEN or CENELEC)
EN ISO International standard adopted as an European standard
ISO International Organization for Standardization’s standard
IEC International Electrotechnical Commission’s standard
HD CENELEC’s harmonisation document
   
EVS-EN European standard implemented in Estonia
EVS-EN ISO International standard adopted in Europe and implemented in Estonia
EVS-EN ISO/IEC International standard/International electrotechnical standard adopted in Europe and implemented in Estonia
EVS-IEC International electrotechnical standard implemented in Estonia
EVS-ISO International standard implemented in Estonia
   
A, AMD amedment
+A a full standard plus the amendment
/A only amendment
COR, AC corrigendum
+COR a full standard plus the corrigendum
NA national annex
+NA a full standard plus the national annex
/NA only national annex
TS technical specification
TR technical report
CWA agreement, developed by a CEN or CENELEC
prEVS-EN (etc) draft standard
   
et the standard is in Estonian only
en the standard is in English only
et-en the standard is in Parallel text Estonian-English