This course enables participants to learn about the best practices for implementing and managing an Application Security as specified in ISO/IEC 27034. The responsibility of a Certified ISO/IEC 27034 Application Security Foundation is to assist organizations to put in place required 27034 framework elements and Application Security guideline for the organization to integrate Application Security Controls (ASC) seamlessly throughout the life cycle of their applications.

AS applies not only to the software of an application but also to its other components and contributing factors that impact its security, such as its technological context, its regulatory context, its business context, its specifications, the sensitivity of its data, and the processes and actors supporting its entire life cycle and it applies to all sizes and all types of organizations exposed to security risks on information associated with their applications.

• Provisioning and operation teams such as architects, analysts, programmers, testers, system administrators, DBA, network administrators, and technical personnel, who wish to: minimize the impact of introducing ASC into organizations’ existing processes, such as design, development, test, deployment, operation, archival and destruction; understand which controls should be applied at each stage of an application`s life cycle and witch one should be implemented inside the application itself
•  Acquirers and Suppliers who wish to: prepare/comply to requests for proposals that include requirements for ASC and Level of Trust
• Auditors who wish to: fully understand the AS processes involves in the ISO/IEC 27034