ISO/IEC 27034 Lead Application Security Implementer case studies
ISO/IEC 27034 Lead Application Security Implementer · Put your knowledge to work in context.
The ISO/IEC 27034 Lead Application Security Implementer is a PECB certification for professionals who build and run an application security program aligned with the ISO/IEC 27034 standard. The training course is aimed at application security practitioners, IT and information security managers, compliance and risk officers, developers and architects, and consultants who want to integrate security into the software development life cycle, establish and maintain the Organization Normative Framework (ONF), implement Application Security Controls (ASCs), and manage security across the Application Security Life Cycle (ASLC). The ISO/IEC 27034 Lead Application Security Implementer case studies are 5 cases and about 4,769 words.
1The Vendor Checklist Exemption Request
Northwind Health runs 40 applications and has adopted an organisation normative framework (ONF) with a catalogue of 180 application security controls (ASCs). The Payments unit is building a mobile wallet that will hold tokens and full names for 300,000 patients.
1,011 words, about 5 min2The Fourteen-Week Deadline With No Threat Model
Fintrail must replace its card authorisation switch to meet a regulatory deadline in fourteen weeks. The build is now forecast to finish in week eleven, two weeks later than planned.
952 words, about 5 min3Four Thousand SAST Findings and a Blocked Log4j Upgrade
Meridian Logistics runs a twelve-year-old Java monolith exposing 4,200 HTTP endpoints, plus 38 services built from it. A newly enabled static analysis ruleset produces 4,200 findings; 900 are high or critical.
911 words, about 5 min4The Deserialisation Incident at 02:10
At 02:10 the WAF on Aster Retail's partner order API blocks a request containing a serialised payload with an unexpected class descriptor. At 02:25 the on-call engineer sees a JVM process on the API host spawn a shell, and outbound traffic to an unfamiliar IP.
968 words, about 5 min5The Repeat Finding and the Ninety-Nine Percent Metric
Corvus Insurance has just finished its annual third-party audit of its application security management process. Two findings were raised.
927 words, about 5 min