OBJECTIF

The ISO / IEC 27034 Lead Implementer training will allow you to acquire the necessary expertise to support an organization in the establishment, implementation, management and maintenance of application security in accordance with the ISO standard. / CEI 27034. This course is designed to provide you with a mastery of best practices in application security techniques and to develop your ability to identify and avoid common application vulnerabilities. .

In particular, the objectives of the training are:

• Understand the correlation between ISO / IEC 27034 and other standards and regulatory frameworks.
• Master the concepts, approaches, methods and techniques needed to effectively implement and manage application security.

PREREQUISITES

• No

GENERAL INFORMATION

• Code : ISO/IEC 27034
• Durée : 5 Days
• schedule : 8h30 - 17h30
• place : training center, Center Urbain Nord

TARGETED AUDIENCE

• Specialized consultants who want to master the implementation of application security techniques
• Anyone responsible for maintaining compliance with the application security requirements of an organization

RESOURCES

• Course materials
• 40% demonstration
• 40% of theory
• 20% practical exercises

PROGRAM OF TRAINING

• Days 1
• Introduction to application security techniques

• Objectives and structure of the training
• ISO and international standards
• ISO / IEC 27034 - Application Security
• ISO 27034 SA - Overview and concepts
• ISO / IEC 27034 - Application Security Framework


• Days 2
• Planning implementation of application security techniques in accordance with ISO / IEC 27034 (project level)

• Application security management process

• Days 3
• Implementation of application security techniques according to ISO / IEC 27034 (organizational level)

• Implementation of application security according to ISO / IEC 27034 (Organizational level)
• Guidelines for the security of organizations and specific applications
• Components of the NOC


• Days 4
• Validation and certification of application security, protocols and data structure of application security controls according to ISO / IEC 27034

• Validation and security certification of applications
• Validation and security certification of applications
• Competence and evaluation of "implementers"


• Days 5
• Passing the exam
• Download the document