Application Security in the ISO 27001:2013 Environment

PREFACE

 

 

 

Application security is a critical area for information security managers. This book shows you how to secure applications as part of the development and roll-out of an information security management system (ISMS) that conforms to ISO/IEC27001.

Chapter 1 introduces you to the international information security management standard, ISO/IEC27001:2013, and describes its relationship with other information security standards. In Chapter 2 we outline the steps to implement an ISMS that meets the specification set out in ISO27001. A critical step in the implementation is the risk assessment, which is described in Chapter 3.

In Chapter 4 we start focusing specifically on how to deal with application security, and survey the threat landscape ...