Application Security in the ISO27001 Environment

by Vinod Vasudevan, Anoop Mangla, Firosh Ummer

Overview

Application Security in the ISO27001 Environment demonstrates how to secure software applications using ISO/IEC 27001. It does this in the context of a wider roll out of an information security management system (ISMS) that conforms to ISO/IEC 27001.

Over 224 pages, they address a range of essential topics, including an introduction to ISO27001 and ISO27002, secure development lifecycles, threat profiling and security testing, and secure coding guidelines. As well as showing how to use ISO27001 to secure individual applications, the book demonstrates how to tackle this issue as part of the development and roll out of an organisation-wide Information Security Management System conforming to the Standard.

Software packages are the conduits to critical business data, thus securing applications adequately is of the utmost importance. Thus you must order a copy of this book today, as it is the de-facto standard on application security in the ISO/IEC 27001 environment.

Key Features:

• De-facto standard on application security in the ISO/IEC 27001 environment.
• Leads the reader step-by-step through all of the phases of how to secure software applications in the context of rolling out of an ISO/IEC 27001 ISMS.
• Demonstrates how to secure such mainstream applications as the Microsoft Office suite, SAP, Lotus Notes, Adobe applications, SAGE, Skype, and many other software applications.

Application Security in the ISO27001 Environment is written by Vinod Vasudevan, Anoop Mangla, Firosh Ummer, Sachin Shetty, Sangita Pakala and Siddharth Anbalahan. Together, the authors offer a wealth of expertise in ISO27001 information security, risk management and software application development.

Product Details

ISBN-13:	9781849281393
Publisher:	IT Governance Ltd
Publication date:	04/10/2010
Sold by:	Barnes & Noble
Format:	eBook
Pages:	220
File size:	3 MB

About the Author

Vinod Vasudevan, CISSP, is the Director of Managed Risk Services at Paladion. He is the co-author of Enhancing Computer Security with Smart Technology, published by Auerbach. Prior to co-founding Paladion, Vinod worked with Microsoft. He wrote the chapter ‘Application Security and ISO27001’.

Vinod Vasudevan, CISSP, is the Director of Managed Risk Services at Paladion. He is the co-author of Enhancing Computer Security with Smart Technology, published by Auerbach. Prior to co-founding Paladion, Vinod worked with Microsoft. 

Editorial Reviews

"This book can be seen as result of a fruitful encounter between a CISO and a software developer. By one hand, the book introduces the major concepts of management of information security, according to the ISO27001 approach and then details which security requirements apply to the application’s domain. By another hand, the book presents how major application threats such as SQL injection and cross site scripting can be addressed by ISO requisites, in a language familiar to every developer. In sum, this book explains ISO in a programmer’s languages and applications challenges to security managers."

Paulo Coelho