ISOR:Applicatieontwikkeling Overzicht van applicatieontwikkeling objecten ingedeeld naar BUC: verschil tussen versies

Uit NORA Online
Naar navigatie springen Naar zoeken springen
k (1 versie: ISOR Applicatieontwikkeling)
k (code-fix; overbodige spaties weggehaald)
Regel 1: Regel 1:
<noinclude>{{ISOR tabel bij|BIO Thema Applicatieontwikkeling}}</noinclude>
<noinclude>{{ISOR tabel bij|BIO Thema Applicatieontwikkeling}}</noinclude>
<table class="wikitable"><tr style="background-color:#d9d9d9">
<table class="wikitable">
 
  <tr>
  <tr>
  <th></th>
  <th></th>
  <th> &nbsp;&nbsp;Nr &nbsp;&nbsp;</th>
  <th>Nr</th>
  <th> &nbsp;&nbsp;Objecten &nbsp;&nbsp;</th>
  <th>Objecten</th>
  <th> &nbsp;&nbsp;Referentie &nbsp;&nbsp;</th>
  <th>Referentie</th>
  <th> &nbsp;&nbsp;IFGS &nbsp;&nbsp;</th>
  <th>IFGS</th>
  </tr>
  </tr>
  <tr>
  <tr>
  <td>Beleid domein</td>
  <td>Beleid domein</td>
  <td> &nbsp;&nbsp;B 01 &nbsp;&nbsp;</td>
  <td>B 01</td>
  <td> &nbsp;&nbsp;Beleid voor (beveiligd) &nbsp;&nbsp;ontwikkelen &nbsp;&nbsp;</td>
  <td>Beleid voor (beveiligd)ontwikkelen</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.1 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.1</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B 02 &nbsp;&nbsp;</td>
  <td>B 02</td>
  <td> &nbsp;&nbsp;Systeem ontwikkelmethode &nbsp;&nbsp;</td>
  <td>Systeem ontwikkelmethode</td>
  <td> &nbsp;&nbsp;SoGP &nbsp;&nbsp;</td>
  <td>SoGP</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B 03 &nbsp;&nbsp;</td>
  <td>B 03</td>
  <td> &nbsp;&nbsp;Classificatie van &nbsp;&nbsp;informatie &nbsp;&nbsp;</td>
  <td>Classificatie vaninformatie</td>
  <td> &nbsp;&nbsp;ISO27002: 8.2.1 &nbsp;&nbsp;</td>
  <td>ISO27002: 8.2.1</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B.04 &nbsp;&nbsp;</td>
  <td>B.04</td>
  <td> &nbsp;&nbsp;Engineeringprincipes voor beveiligde &nbsp;&nbsp;systemen &nbsp;&nbsp;</td>
  <td>Engineeringprincipes voor beveiligdesystemen</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.5 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.5</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B.05 &nbsp;&nbsp;</td>
  <td>B.05</td>
  <td> &nbsp;&nbsp;Business Impact analyse &nbsp;&nbsp;(BIA) &nbsp;&nbsp;</td>
  <td>Business Impact analyse(BIA)</td>
  <td> &nbsp;&nbsp;SoGP/IR2.2 &nbsp;&nbsp;</td>
  <td>SoGP/IR2.2</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B.06 &nbsp;&nbsp;</td>
  <td>B.06</td>
  <td> &nbsp;&nbsp;Privacy en bescherming persoonsgegevens &nbsp;&nbsp;(GEB/PIA) &nbsp;&nbsp;</td>
  <td>Privacy en bescherming persoonsgegevens(GEB/PIA)</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO27002:18.2.4 &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO,ISO27002:18.2.4</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B 07 &nbsp;&nbsp;</td>
  <td>B 07</td>
  <td> &nbsp;&nbsp;Kwaliteit managementsysteem &nbsp;&nbsp;</td>
  <td>Kwaliteit managementsysteem</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B 08 &nbsp;&nbsp;</td>
  <td>B 08</td>
  <td> &nbsp;&nbsp;Toegangbeveiliging op &nbsp;&nbsp;programmacode &nbsp;&nbsp;</td>
  <td>Toegangbeveiliging opprogrammacode</td>
  <td> &nbsp;&nbsp;ISO27002: 9.4.5 &nbsp;&nbsp;</td>
  <td>ISO27002: 9.4.5</td>
  <td> &nbsp;&nbsp;G &nbsp;&nbsp;</td>
  <td>G</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B.09 &nbsp;&nbsp;</td>
  <td>B.09</td>
  <td> &nbsp;&nbsp;Projectorganisatie &nbsp;&nbsp;</td>
  <td>Projectorganisatie</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;S &nbsp;&nbsp;</td>
  <td>S</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;Nr &nbsp;&nbsp;</td>
  <td>Nr</td>
  <td> &nbsp;&nbsp;Objecten &nbsp;&nbsp;</td>
  <td>Objecten</td>
  <td> &nbsp;&nbsp;Referentie &nbsp;&nbsp;</td>
  <td>Referentie</td>
  <td> &nbsp;&nbsp;IFGS &nbsp;&nbsp;</td>
  <td>IFGS</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td>Uitvoering domein</td>
  <td>Uitvoering domein</td>
  <td> &nbsp;&nbsp;U.01 &nbsp;&nbsp;</td>
  <td>U.01</td>
  <td> &nbsp;&nbsp;Procedures voor &nbsp;&nbsp;wijzigingbeheer m.b.t. applicaties en systemen &nbsp;&nbsp;</td>
  <td>Procedures voorwijzigingbeheer m.b.t. applicaties en systemen</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.2 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.2</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.02 &nbsp;&nbsp;</td>
  <td>U.02</td>
  <td> &nbsp;&nbsp;Beperkingen voor de &nbsp;&nbsp;installatie van software (richtlijnen) &nbsp;&nbsp;</td>
  <td>Beperkingen voor deinstallatie van software (richtlijnen)</td>
  <td> &nbsp;&nbsp;ISO27002: 12.6.2 &nbsp;&nbsp;</td>
  <td>ISO27002: 12.6.2</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.03 &nbsp;&nbsp;</td>
  <td>U.03</td>
  <td> &nbsp;&nbsp;Richtlijnen voor programmacode &nbsp;&nbsp;(best practices) &nbsp;&nbsp;</td>
  <td>Richtlijnen voor programmacode(best practices)</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.04 &nbsp;&nbsp;</td>
  <td>U.04</td>
  <td> &nbsp;&nbsp;Analyse en specificatie &nbsp;&nbsp;van informatiesystemen &nbsp;&nbsp;</td>
  <td>Analyse en specificatievan informatiesystemen</td>
  <td> &nbsp;&nbsp;Cobit &nbsp;&nbsp;</td>
  <td>Cobit</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.05 &nbsp;&nbsp;</td>
  <td>U.05</td>
  <td> &nbsp;&nbsp;Analyse en specificatie &nbsp;&nbsp;van informatiebeveiligingseisen &nbsp;&nbsp;</td>
  <td>Analyse en specificatievan informatiebeveiligingseisen</td>
  <td> &nbsp;&nbsp;ISO27002:14.1.1 &nbsp;&nbsp;</td>
  <td>ISO27002:14.1.1</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.06 &nbsp;&nbsp;</td>
  <td>U.06</td>
  <td> &nbsp;&nbsp;Applicatie ontwerp &nbsp;&nbsp;</td>
  <td>Applicatie ontwerp</td>
  <td> &nbsp;&nbsp;SoGP &nbsp;&nbsp;</td>
  <td>SoGP</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.07 &nbsp;&nbsp;</td>
  <td>U.07</td>
  <td> &nbsp;&nbsp;Applicatiefunctionaliteiten &nbsp;&nbsp;(invoer, verwerking, uitvoer) &nbsp;&nbsp;</td>
  <td>Applicatiefunctionaliteiten(invoer, verwerking, uitvoer)</td>
  <td> &nbsp;&nbsp;ISO27002:12.2.1, 12.2.2, &nbsp;&nbsp;1.2.2.4, BIR 1.0 &nbsp;&nbsp;</td>
  <td>ISO27002:12.2.1, 12.2.2,1.2.2.4, BIR 1.0</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.08 &nbsp;&nbsp;</td>
  <td>U.08</td>
  <td> &nbsp;&nbsp;Applicatiebouw &nbsp;&nbsp;</td>
  <td>Applicatiebouw</td>
  <td> &nbsp;&nbsp;SoGP &nbsp;&nbsp;</td>
  <td>SoGP</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.09 &nbsp;&nbsp;</td>
  <td>U.09</td>
  <td> &nbsp;&nbsp;Testen van &nbsp;&nbsp;systeembeveiliging &nbsp;&nbsp;</td>
  <td>Testen vansysteembeveiliging</td>
  <td> &nbsp;&nbsp;ISO27002:14.2.8 &nbsp;&nbsp;</td>
  <td>ISO27002:14.2.8</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.10 &nbsp;&nbsp;</td>
  <td>U.10</td>
  <td> &nbsp;&nbsp;Systeemacceptatie tests &nbsp;&nbsp;</td>
  <td>Systeemacceptatie tests</td>
  <td> &nbsp;&nbsp;ISO27002:14.2.9 &nbsp;&nbsp;</td>
  <td>ISO27002:14.2.9</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.11 &nbsp;&nbsp;</td>
  <td>U.11</td>
  <td> &nbsp;&nbsp;Beschermen van &nbsp;&nbsp;testgegevens &nbsp;&nbsp;</td>
  <td>Beschermen vantestgegevens</td>
  <td> &nbsp;&nbsp;ISO27002:14.3.1 &nbsp;&nbsp;</td>
  <td>ISO27002:14.3.1</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.12 &nbsp;&nbsp;</td>
  <td>U.12</td>
  <td> &nbsp;&nbsp;Beveiligde Ontwikkel- (en &nbsp;&nbsp;Test-)omgeving &nbsp;&nbsp;</td>
  <td>Beveiligde Ontwikkel- (enTest-)omgeving</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.6 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.6</td>
  <td> &nbsp;&nbsp;G &nbsp;&nbsp;</td>
  <td>G</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.13 &nbsp;&nbsp;</td>
  <td>U.13</td>
  <td> &nbsp;&nbsp;Applicatiekoppelingen &nbsp;&nbsp;</td>
  <td>Applicatiekoppelingen</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO25010, &nbsp;&nbsp;NIST CA &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO,ISO25010,NIST CA</td>
  <td> &nbsp;&nbsp;G &nbsp;&nbsp;</td>
  <td>G</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.14 &nbsp;&nbsp;</td>
  <td>U.14</td>
  <td> &nbsp;&nbsp;Logging en monitoring &nbsp;&nbsp;</td>
  <td>Logging en monitoring</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;G &nbsp;&nbsp;</td>
  <td>G</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.15 &nbsp;&nbsp;</td>
  <td>U.15</td>
  <td> &nbsp;&nbsp;Applicatie architectuur &nbsp;&nbsp;</td>
  <td>Applicatie architectuur</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO25010 &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO,ISO25010</td>
  <td> &nbsp;&nbsp;S &nbsp;&nbsp;</td>
  <td>S</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.16 &nbsp;&nbsp;</td>
  <td>U.16</td>
  <td> &nbsp;&nbsp;Tooling ontwikkelmethode &nbsp;&nbsp;</td>
  <td>Tooling ontwikkelmethode</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO25010 &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO,ISO25010</td>
  <td> &nbsp;&nbsp;S &nbsp;&nbsp;</td>
  <td>S</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;Nr &nbsp;&nbsp;</td>
  <td>Nr</td>
  <td> &nbsp;&nbsp;Objecten &nbsp;&nbsp;</td>
  <td>Objecten</td>
  <td> &nbsp;&nbsp;Referentie &nbsp;&nbsp;</td>
  <td>Referentie</td>
  <td> &nbsp;&nbsp;IFGS &nbsp;&nbsp;</td>
  <td>IFGS</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td>Control domein</td>
  <td>Control domein</td>
  <td> &nbsp;&nbsp;C.01 &nbsp;&nbsp;</td>
  <td>C.01</td>
  <td> &nbsp;&nbsp;Richtlijnen evaluatie ontwikkelactiviteiten &nbsp;&nbsp;</td>
  <td>Richtlijnen evaluatie ontwikkelactiviteiten</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO27002: 12.6.1 &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO,ISO27002: 12.6.1</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.02 &nbsp;&nbsp;</td>
  <td>C.02</td>
  <td> &nbsp;&nbsp;Versiebeheer &nbsp;&nbsp;</td>
  <td>Versiebeheer</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.03 &nbsp;&nbsp;</td>
  <td>C.03</td>
  <td> &nbsp;&nbsp;Patchmanagement van externe &nbsp;&nbsp;programmacode &nbsp;&nbsp;</td>
  <td>Patchmanagement van externeprogrammacode</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.04 &nbsp;&nbsp;</td>
  <td>C.04</td>
  <td> &nbsp;&nbsp;(Software)configuratie beheer &nbsp;&nbsp;</td>
  <td>(Software)configuratie beheer</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.05 &nbsp;&nbsp;</td>
  <td>C.05</td>
  <td> &nbsp;&nbsp;Quality assurance &nbsp;&nbsp;</td>
  <td>Quality assurance</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.06 &nbsp;&nbsp;</td>
  <td>C.06</td>
  <td> &nbsp;&nbsp;Compliance management &nbsp;&nbsp;</td>
  <td>Compliance management</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.07 &nbsp;&nbsp;</td>
  <td>C.07</td>
  <td> &nbsp;&nbsp;Technische beoordeling van &nbsp;&nbsp;informatiesystemen na wijziging besturingsplatform &nbsp;&nbsp;</td>
  <td>Technische beoordeling vaninformatiesystemen na wijziging besturingsplatform</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.3 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.3</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.08 &nbsp;&nbsp;</td>
  <td>C.08</td>
  <td> &nbsp;&nbsp;Beheersing van &nbsp;&nbsp;softwareontwikkeling(sprojecten &nbsp;&nbsp;</td>
  <td>Beheersing vansoftwareontwikkeling(sprojecten</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;S &nbsp;&nbsp;</td>
  <td>S</td>
  </tr>
  </tr>
<caption align="bottom">Applicatieontwikkeling, Overzicht objecten ingedeeld naar BUC</caption></table>
<caption align="bottom">Applicatieontwikkeling, Overzicht objecten ingedeeld naar BUC</caption></table>

Versie van 15 mei 2019 15:12

Dit is een tabel bij BIO Thema-uitwerking Applicatieontwikkeling
Nr Objecten Referentie IFGS
Beleid domein B 01 Beleid voor (beveiligd)ontwikkelen ISO27002: 14.2.1 I
B 02 Systeem ontwikkelmethode SoGP I
B 03 Classificatie vaninformatie ISO27002: 8.2.1 I
B.04 Engineeringprincipes voor beveiligdesystemen ISO27002: 14.2.5 I
B.05 Business Impact analyse(BIA) SoGP/IR2.2 I
B.06 Privacy en bescherming persoonsgegevens(GEB/PIA) CIP Domeingroep BIO,ISO27002:18.2.4 I
B 07 Kwaliteit managementsysteem CIP Domeingroep BIO F
B 08 Toegangbeveiliging opprogrammacode ISO27002: 9.4.5 G
B.09 Projectorganisatie CIP Domeingroep BIO S
Nr Objecten Referentie IFGS
Uitvoering domein U.01 Procedures voorwijzigingbeheer m.b.t. applicaties en systemen ISO27002: 14.2.2 I
U.02 Beperkingen voor deinstallatie van software (richtlijnen) ISO27002: 12.6.2 I
U.03 Richtlijnen voor programmacode(best practices) CIP Domeingroep BIO I
U.04 Analyse en specificatievan informatiesystemen Cobit F
U.05 Analyse en specificatievan informatiebeveiligingseisen ISO27002:14.1.1 F
U.06 Applicatie ontwerp SoGP F
U.07 Applicatiefunctionaliteiten(invoer, verwerking, uitvoer) ISO27002:12.2.1, 12.2.2,1.2.2.4, BIR 1.0 F
U.08 Applicatiebouw SoGP F
U.09 Testen vansysteembeveiliging ISO27002:14.2.8 F
U.10 Systeemacceptatie tests ISO27002:14.2.9 F
U.11 Beschermen vantestgegevens ISO27002:14.3.1 F
U.12 Beveiligde Ontwikkel- (enTest-)omgeving ISO27002: 14.2.6 G
U.13 Applicatiekoppelingen CIP Domeingroep BIO,ISO25010,NIST CA G
U.14 Logging en monitoring CIP Domeingroep BIO G
U.15 Applicatie architectuur CIP Domeingroep BIO,ISO25010 S
U.16 Tooling ontwikkelmethode CIP Domeingroep BIO,ISO25010 S
Nr Objecten Referentie IFGS
Control domein C.01 Richtlijnen evaluatie ontwikkelactiviteiten CIP Domeingroep BIO,ISO27002: 12.6.1 I
C.02 Versiebeheer CIP Domeingroep BIO F
C.03 Patchmanagement van externeprogrammacode CIP Domeingroep BIO F
C.04 (Software)configuratie beheer CIP Domeingroep BIO F
C.05 Quality assurance CIP Domeingroep BIO F
C.06 Compliance management CIP Domeingroep BIO F
C.07 Technische beoordeling vaninformatiesystemen na wijziging besturingsplatform ISO27002: 14.2.3 F
C.08 Beheersing vansoftwareontwikkeling(sprojecten CIP Domeingroep BIO S
Applicatieontwikkeling, Overzicht objecten ingedeeld naar BUC