Application Security in the ISO27001 Environment - Vinod, Vasudevan (IT Governance Pub., 2008)
Chapter 1: introduction to the international information security standards iso27001 and iso27002; chapter 2: the iso27001 implementation project; chapter 3: risk assessment; chapter 4: introduction to application security threats; chapter 5: application security and iso27001; chapter 6: attacks on applications; chapter 7: secure development lifecycle; chapter 8: threat profiling and security testing; chapter 9: secure coding guidelines; itg resources