Chapter 1: introduction to the international information security standards iso27001 and iso27002; chapter 2: the iso27001 implementation project; chapter 3: risk assessment; chapter 4: introduction to application security threats; chapter 5: application security and iso27001; chapter 6: attacks on applications; chapter 7: secure development lifecycle; chapter 8: threat profiling and security testing; chapter 9: secure coding guidelines; itg resources
Summary
Application Security in the ISO27001 Environment demonstrates how to secure software applications within a best practiceISO/IEC 27001 environment and supports implementation of the PCIDSSPayment Application Security Standard