ISO 27001 8.25 Secure Development Life Cycle

Requirement

"Rules for the secure development of software and systems shall be established and applied."[1]

Explanation

The organization should define a software development lifecycle that considers security at each stage. OWASP provides guidance via a PowerPoint slide describing a secure software development life cycle.

References

ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo