ISO/IEC TS 27034-5-1:2018 PDF

Name: ISO/IEC TS 27034-5-1:2018 — Information technology — Application security — Part 5-1: Protocols and application security controls data structure, XML schemas
SKU: ISO/IEC TS 27034-5-1:2018
Price: 25 EUR
Availability: InStock

Information technology — Application security — Part 5-1: Protocols and application security controls data structure, XML schemas

Название (английский):

ISO/IEC TS 27034-5-1:2018

Information technology — Application security — Part 5-1: Protocols and application security controls data structure, XML schemas

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 77
Дата публикации:: 7 мая 2018 г.
Издание:: ISO/IEC TS 27034 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version1 155 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:13 раб. дн. (перевод)

Цена:1 155 €

Описание (английский):

ISO/IEC TS 27034-5-1:2018 defines XML Schemas that implement the minimal set of information requirements and essential attributes of ASCs and the activities and roles of the Application Security Life Cycle Reference Model (ASLCRM) from ISO/IEC 27034-5.

Abstract

Похожие стандарты

Стандарты, упомянутые в описании

Overview

ISO/IEC TS 27034-5-1:2018 is a technical specification developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). This standard addresses a critical need in information technology: the standardized definition and exchange of Application Security Controls (ASCs) using XML schemas. ISO/IEC TS 27034-5-1:2018 defines the minimal set of information requirements, essential attributes for ASCs, and the activities and roles tied to the Application Security Life Cycle Reference Model (ASLCRM) outlined in ISO/IEC 27034-5.

This specification supports secure, efficient sharing and management of application security controls data. By providing a reference XML schema structure, it facilitates tool interoperability and consistent security control implementation across organizations and throughout the application life cycle.

Key Topics

XML Schema for ASCs: The document specifies standardized XML schema definitions that encapsulate the essential data model for ASCs, supporting platform-independent data exchange.

ASC Data Model Structure:

ASC Package: Groups one or more ASCs for streamlined exchange and management.
ASC Identification: Defines unique identifiers, version information, names, and relationships with other ASCs.
ASC Objective: Specifies purpose, security requirements addressed, assigned levels of trust, preconditions, and trust range descriptions.
Approval and E-signature: Supports tracking and validating approval stages through digital signatures, adding trust and auditability.

Integration with ASLCRM: Activities and roles from the Application Security Life Cycle Reference Model are directly embedded in the schema, clarifying responsibilities and processes in the life cycle of ASCs.

Interoperability Focus: The technical specification ensures that ASC authoring, distribution, approval, and integration can be handled consistently by different vendors, organizations, and tools.

Applications

ISO/IEC TS 27034-5-1:2018 delivers practical value to a range of stakeholders in information technology and software development:

Software Development Organizations: Enables the creation, exchange, and validation of application security controls in a standardized, structured manner, reducing risk of miscommunication.

Security Tool Vendors: Provides a formally defined XML reference model to facilitate integration of security management and assessment tools, ensuring compatibility and promoting automation.

ASC Suppliers and Acquirers: Simplifies the process of distributing and implementing security controls, ensuring integrity through digital signatures, and supporting multilingual or localized deployment.

Managers and Security Committees: Ensures repeatability, reusability, and auditability of application security controls. Managers can efficiently oversee the lifecycle and evolutionary history of each ASC.

Auditors and Compliance Teams: Structured metadata and traceable approval records support robust compliance checks with internal policies and external regulations.

Related Standards

For a holistic approach to application security, ISO/IEC TS 27034-5-1:2018 should be used in conjunction with the following standards:

ISO/IEC 27034-1 - Information technology - Security techniques - Application security - Part 1: Overview and concepts Foundational concepts and terminology for application security.

ISO/IEC 27034-5 - Protocols and application security control data structure The primary reference for the life cycle model and detailed protocols.

ISO/IEC 19770 Series – IT asset management For describing assets and integrating security controls at the asset level.

ISO/IEC 27001 & 27002 – Information security management systems (ISMS) General information security controls and guidance for organizational policy alignment.

By leveraging ISO/IEC TS 27034-5-1:2018, organizations strengthen their application security posture, improve interoperability among tools and stakeholders, and support compliance with international standards for information security. This standard is a cornerstone resource for implementing and managing robust, standardized application security controls.

ISO/IEC TS 27034-5-1:2018 PDF

Abstract

Похожие стандарты

Overview

Key Topics

Applications

Related Standards

Технические детали

ISO/IEC 27034-5:2017

Information technology — Security techniques — Application security — Part 5: Protocols and application secur…

ISO/IEC 27034-1:2011

Information technology — Security techniques — Application security — Part 1: Overview and concepts

BS ISO/IEC 19770-11:2021

Information technology. IT asset management. Requirements for bodies providing audit and certification of IT…

ISO/IEC 27001:2022/Amd 1:2024

Information security, cybersecurity and privacy protection — Information security management systems — Requir…