Skip to content
Information SecurityInternational

ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

What is ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework?

ISO/IEC 27034-2:2015 describes the Organization Normative Framework for application security: the committee that owns it, the management process that designs, implements, monitors, improves and audits it, and the context components, repositories, ASC library, life cycle models and processes it holds. It comprises 24 controls organised across 2 domains, and applies in International.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework overlaps with the standards you already hold

What ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework means in your sector

What ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework means for your job

Questions people ask about ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework

What is ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework?
ISO/IEC 27034-2:2015 describes the Organization Normative Framework for application security: the committee that owns it, the management process that designs, implements, monitors, improves and audits it, and the context components, repositories, ASC library, life cycle models and processes it holds.
How many controls does ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework have?
ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework contains 24 controls organized across 2 domains.
Where does ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework apply?
ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework applies in International. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework is covered here?
This page covers ISO/IEC 27034-2:2015, first edition, published August 2015, confirmed 2021.

Query ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework programmatically

ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework, its 24 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework API reference and MCP config →

How ready are you for ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .