Project Overview

2024M - INCITS/ISO/IEC 27034-7:2018[2019]: Information technology -- Application security -- Part 7: Assurance prediction framework (Inactive)

page=project_overview&type=project

Start: 2023-12-19

100% Complete

Share |

Title of Standard:: Information technology -- Application security -- Part 7: Assurance prediction framework

Scope Summary:: Describes the minimum requirements when the required activities specified by an Application Security Control (ASC) are replaced with a Prediction Application Security Rationale (PASR). The ASC mapped to a PASR define the Expected Level of Trust for a subsequent application. In the context of an Expected Level of Trust, there is always an original application where the project team performed the activities of the indicated ASC to achieve an Actual Level of Trust. The use of Prediction Application Security Rationales (PASRs), defined by this document, is applicable to project teams which have a defined Application Normative Framework (ANF) and an original application with an Actual Level of Trust.

Patent Policy Information:: INCITS subscribes to the ANSI Patent Policy when developing American National Standards. INCITS encourages disclosure, where possible, of the existence of pending U.S. patent applications relating to the standard under development, and of any relevant unexpired foreign patents. If such notice is received, INCITS seeks a statement that the patent holder will comply with the ANSI Patent Policy. To download the patent declaration form and for additional information, see https://www.incits.org/standards-information/legal-info.