// Security
ISO 27034 Application Security Compliance Software
Guidance for integrating security throughout the application life cycle.
Framework at a glance
Short name
ISO 27034
Version
2011
Category
Security
Controls
18
What ISO 27034 covers
18 controls across 2 domains — every one tracked, owned and evidenced in Cyber Horizon.
Organization Level (ONF)
8 controls- ONF-1 Establish the Organization Normative Framework
- ONF-2 Business Context Component
- ONF-3 Regulatory and Compliance Context Component
- ONF-4 Technological Context Component
- ONF-5 Application Security Lifecycle Reference Model
Application Level (ANF/ASMP)
10 controls- ASMP-1 Specify Application Requirements and Environment
- ASMP-2 Assess Application Security Risks
- ASMP-3 Create and Maintain the Application Normative Framework
- ASMP-4 Provision and Operate the Application
- ASMP-5 Audit the Application Security
How Cyber Horizon automates ISO 27034
Every ISO 27034 control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is ISO 27034 Application Security?
Guidance for integrating security throughout the application life cycle.
How many controls does ISO 27034 Application Security have?
ISO 27034 Application Security (2011) has 18 controls in Cyber Horizon's catalogue, organised across 2 domains.
How does Cyber Horizon help with ISO 27034 Application Security?
Cyber Horizon maps ISO 27034 Application Security into a shared control library alongside every other framework you run, so evidence collected once counts towards ISO 27034 and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Security frameworks
See ISO 27034 mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of ISO 27034 in Cyber Horizon.