LAPT
London Academy of Professional Training
Master Certificate
Level 6-7
Leadership
ISO IT & Related Technologies
ISO 27034 — Application Security
REF: IIT-COD-27034
Prerequisites
None
Awarding Body: LAPT — London Academy of Professional Training
Curriculum Overview
1
Leadership in Application Security
2
Compliance and Audit Processes
3
ISO 27034 Implementation Strategies
Overview of ISO 27034 and Its Importance in Application Security
6 classes
1.1 Define ISO 27034 and Its Core Components
1.2 Explain the Relevance of ISO 27034 in Today's Digital Landscape
1.3 Identify Key Benefits of Implementing ISO 27034 in Application Security
1.4 Discuss Common Challenges in Implementing ISO 27034
1.5 Explore Real-World Case Studies of ISO 27034 Implementation
1.6 Develop an Action Plan for Adopting ISO 27034 in Your Organization
Understanding the ISO 27034 Framework and Key Principles
Risk Assessment and Management in the ISO 27034 Context
Developing Application Security Policies Aligned with ISO 27034
Implementation and Continuous Improvement of ISO 27034 Strategies
4
Security Control Design
Fundamentals of Security Control Design
6 classes
1.1 Define Security Control Design and Its Importance
1.2 Identify Key Components of Security Control Design
1.3 Analyze Risk Assessment for Security Controls
1.4 Explore Security Control Frameworks and Standards
1.5 Evaluate Security Control Design Strategies
1.6 Implement a Security Control Design Plan
ISO 27034 Framework and Compliance
6 classes
2.1 Understand the ISO 27034 Framework Components
2.2 Identify Key Compliance Requirements in Application Security
2.3 Examine Roles and Responsibilities in Security Control Design
2.4 Assess Risk Management Strategies within ISO 27034
2.5 Develop a Compliance Checklist for Application Security
2.6 Implement Best Practices for Ongoing Compliance Monitoring
Threat Modeling and Risk Assessment Techniques
6 classes
3.1 Define Threat Modeling Principles and Concepts
3.2 Identify Common Threats in Application Security
3.3 Analyze System Architecture for Vulnerability Assessment
3.4 Conduct Qualitative Risk Assessment for Applications
3.5 Implement Mitigation Strategies for Identified Risks
3.6 Evaluate Threat Modeling Outcomes and Continuous Improvement
Designing Effective Security Controls
6 classes
4.1 Understand the Principles of Security Control Design
4.2 Identify Key Security Risks in Application Development
4.3 Evaluate Existing Security Controls and Their Effectiveness
4.4 Design Tailored Security Controls for Specific Applications
4.5 Implement Security Controls into the Development Lifecycle
4.6 Assess and Improve Security Controls Post-Implementation
Evaluating and Testing Security Controls
6 classes
5.1 Identify Key Security Controls for Applications
5.2 Assess the Effectiveness of Security Controls
5.3 Develop Test Cases for Security Control Verification
5.4 Execute Security Control Tests and Interpret Results
5.5 Identify Gaps and Areas for Improvement in Security Controls
5.6 Document Findings and Recommend Security Enhancements
5
Risk Management and Assessment
Understanding Risk Management Principles in Information Security
6 classes
1.1 Define Risk Management Concepts in Information Security
1.2 Identify Key Principles of Risk Assessment
1.3 Analyze the Risk Management Process Stages
1.4 Evaluate Common Risk Assessment Frameworks
1.5 Implement Risk Mitigation Strategies
1.6 Assess Risk Management Effectiveness in Applications
Identifying Risks in Application Security
6 classes
2.1 Prioritize Application Security Risks
2.2 Identify Common Vulnerabilities in Applications
2.3 Assess the Impact of Identified Risks
2.4 Evaluate Current Security Measures in Place
2.5 Conduct a Risk Assessment Workshop
2.6 Develop a Risk Mitigation Plan for Applications
Analyzing and Evaluating Security Risks
6 classes
3.1 Identify Key Security Risks in Applications
3.2 Assess Impact and Likelihood of Security Threats
3.3 Utilize Risk Assessment Tools and Techniques
3.4 Analyze Vulnerabilities within Application Architecture
3.5 Evaluate Existing Security Controls Effectiveness
3.6 Develop Risk Mitigation Strategies for Applications
Implementing Risk Mitigation Strategies
6 classes
4.1 Identify Key Risks in Application Security
4.2 Assess Vulnerabilities and Threats to Applications
4.3 Develop Comprehensive Risk Mitigation Strategies
4.4 Implement Risk Mitigation Measures Effectively
4.5 Monitor and Review the Effectiveness of Mitigation Strategies
4.6 Communicate Risk Management Decisions to Stakeholders
Monitoring and Reviewing Risk Management Processes
6 classes
5.1 Identify Key Risk Indicators for Monitoring
5.2 Establish Protocols for Ongoing Risk Assessment
5.3 Implement Tools for Effective Risk Management Monitoring
5.4 Analyze Data Trends in Risk Management Performance
5.5 Evaluate the Effectiveness of Current Risk Management Strategies
5.6 Develop Action Plans for Continuous Risk Process Improvement
6
Application Security Fundamentals
Understanding Application Security Principles
6 classes
1.1 Define Application Security and Its Importance
1.2 Identify Key Threats to Application Security
1.3 Explore the Core Principles of Application Security
1.4 Assess Vulnerability Management Techniques
1.5 Implement Security Controls in Application Development
1.6 Evaluate Real-World Application Security Case Studies
Security Lifecycle and Risk Management
6 classes
2.1 Understand the Security Lifecycle Stages
2.2 Identify Key Risk Management Concepts
2.3 Analyze Application Vulnerabilities and Threats
2.4 Implement Security Controls in the Development Lifecycle
2.5 Evaluate Risk Assessment Techniques for Applications
2.6 Develop an Application Security Maintenance Plan
Secure Coding Practices and Standards
6 classes
3.1 Identify Common Secure Coding Vulnerabilities
3.2 Understand OWASP Top Ten Security Risks
3.3 Implement Input Validation Techniques
3.4 Apply Secure Authentication and Session Management
3.5 Utilize Data Encryption Practices in Code
3.6 Review and Apply Coding Standards and Best Practices
Application Security Testing and Assessment Techniques
6 classes
4.1 Identify Key Application Security Testing Techniques
4.2 Analyze the Importance of Threat Modeling in Assessments
4.3 Explore Static Application Security Testing (SAST) Methods
4.4 Implement Dynamic Application Security Testing (DAST) Tools
4.5 Evaluate Manual vs. Automated Application Security Assessments
4.6 Develop a Comprehensive Application Security Testing Strategy
Implementing Security Controls and Compliance
6 classes
5.1 Identify Key Security Controls for Applications
5.2 Evaluate Compliance Requirements for Application Security
5.3 Develop a Risk Assessment Framework for Applications
5.4 Implement Security Controls in Application Development
5.5 Monitor and Audit Security Controls Effectiveness
5.6 Prepare for ISO 27034 Certification Audit
Assessment Breakdown
Passing Mark: 325 / 500 (65%)
How to Enrol
Website: lapt.org
Email: info@lapt.org
Phone: +44 7513 283044
Address: 85 Great Portland Street, W1W 7LT, United Kingdom
Hours: Monday – Friday, 9AM – 5PM