ISOR:Applicatieontwikkeling Overzicht van applicatieontwikkeling objecten ingedeeld naar BUC: verschil tussen versies

Uit NORA Online
Naar navigatie springen Naar zoeken springen
k (tabel aangepast)
 
k (taalfouten eruit gehaald)
 
(12 tussenliggende versies door 3 gebruikers niet weergegeven)
Regel 1: Regel 1:
<noinclude>{{ISOR tabel bij|BIO Thema Applicatieontwikkeling}}</noinclude>
<noinclude>{{ISOR tabel bij|BIO Thema Applicatieontwikkeling}}
<table class="wikitable"><tr style="background-color:#d9d9d9">
Deze tabel behoort bij versie 1.0. In versie 2.0 is de tabel komen te vervallen.</noinclude>
 
<table class="wikitable">
  <tr>
  <tr>
  <th></th>
  <th></th>
  <th> &nbsp;&nbsp;Nr &nbsp;&nbsp;</th>
  <th>ID</th>
  <th> &nbsp;&nbsp;Objecten &nbsp;&nbsp;</th>
  <th>Objecten</th>
  <th> &nbsp;&nbsp;Referentie &nbsp;&nbsp;</th>
  <th>Referentie</th>
  <th> &nbsp;&nbsp;IFGS &nbsp;&nbsp;</th>
  <th>IFGS</th>
  </tr>
  </tr>
  <tr>
  <tr>
  <td>Beleid domein</td>
  <td>Beleidsdomein</td>
  <td> &nbsp;&nbsp;B 01 &nbsp;&nbsp;</td>
  <td>B.01</td>
  <td> &nbsp;&nbsp;Beleid voor (beveiligd) &nbsp;&nbsp;ontwikkelen &nbsp;&nbsp;</td>
  <td>Beleid voor (beveiligd)ontwikkelen</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.1 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.1</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B 02 &nbsp;&nbsp;</td>
  <td>B.02</td>
  <td> &nbsp;&nbsp;Systeem ontwikkelmethode &nbsp;&nbsp;</td>
  <td>Systeem ontwikkelmethode</td>
  <td> &nbsp;&nbsp;SoGP &nbsp;&nbsp;</td>
  <td>SoGP</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B 03 &nbsp;&nbsp;</td>
  <td>B.03</td>
  <td> &nbsp;&nbsp;Classificatie van &nbsp;&nbsp;informatie &nbsp;&nbsp;</td>
  <td>Classificatie van informatie</td>
  <td> &nbsp;&nbsp;ISO27002: 8.2.1 &nbsp;&nbsp;</td>
  <td>ISO27002: 8.2.1</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B.04 &nbsp;&nbsp;</td>
  <td>B.04</td>
  <td> &nbsp;&nbsp;Engineeringprincipes voor beveiligde &nbsp;&nbsp;systemen &nbsp;&nbsp;</td>
  <td>Engineeringprincipes voor beveiligde systemen</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.5 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.5</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B.05 &nbsp;&nbsp;</td>
  <td>B.05</td>
  <td> &nbsp;&nbsp;Business Impact analyse &nbsp;&nbsp;(BIA) &nbsp;&nbsp;</td>
  <td>Business Impact Analyse(BIA)</td>
  <td> &nbsp;&nbsp;SoGP/IR2.2 &nbsp;&nbsp;</td>
  <td>SoGP/IR2.2</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B.06 &nbsp;&nbsp;</td>
  <td>B.06</td>
  <td> &nbsp;&nbsp;Privacy en bescherming persoonsgegevens &nbsp;&nbsp;(GEB/PIA) &nbsp;&nbsp;</td>
  <td>Privacy en bescherming persoonsgegevens(GEB/DPIA)</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO27002:18.2.4 &nbsp;&nbsp;</td>
  <td>ISO27002:18.2.4, CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B 07 &nbsp;&nbsp;</td>
  <td>B.07</td>
  <td> &nbsp;&nbsp;Kwaliteit managementsysteem &nbsp;&nbsp;</td>
  <td>Kwaliteit managementsysteem</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B 08 &nbsp;&nbsp;</td>
  <td>B.08</td>
  <td> &nbsp;&nbsp;Toegangbeveiliging op &nbsp;&nbsp;programmacode &nbsp;&nbsp;</td>
  <td>Toegangsbeveiliging op programmacode</td>
  <td> &nbsp;&nbsp;ISO27002: 9.4.5 &nbsp;&nbsp;</td>
  <td>ISO27002: 9.4.5</td>
  <td> &nbsp;&nbsp;G &nbsp;&nbsp;</td>
  <td>G</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;B.09 &nbsp;&nbsp;</td>
  <td>B.09</td>
  <td> &nbsp;&nbsp;Projectorganisatie &nbsp;&nbsp;</td>
  <td>Projectorganisatie</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;S &nbsp;&nbsp;</td>
  <td>S</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td>Uitvoeringsdomein</td>
  <td> &nbsp;&nbsp;Nr &nbsp;&nbsp;</td>
  <td>U.01</td>
<td> &nbsp;&nbsp;Objecten &nbsp;&nbsp;</td>
  <td>Procedures voor wijzigingsbeheer m.b.t. applicaties en systemen</td>
<td> &nbsp;&nbsp;Referentie &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.2</td>
<td> &nbsp;&nbsp;IFGS &nbsp;&nbsp;</td>
  <td>I</td>
</tr>
<tr>
<td>Uitvoering domein</td>
<td> &nbsp;&nbsp;U.01 &nbsp;&nbsp;</td>
  <td> &nbsp;&nbsp;Procedures voor &nbsp;&nbsp;wijzigingbeheer m.b.t. applicaties en systemen &nbsp;&nbsp;</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.2 &nbsp;&nbsp;</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.02 &nbsp;&nbsp;</td>
  <td>U.02</td>
  <td> &nbsp;&nbsp;Beperkingen voor de &nbsp;&nbsp;installatie van software (richtlijnen) &nbsp;&nbsp;</td>
  <td>Beperkingen voor de installatie van software (richtlijnen)</td>
  <td> &nbsp;&nbsp;ISO27002: 12.6.2 &nbsp;&nbsp;</td>
  <td>ISO27002: 12.6.2</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.03 &nbsp;&nbsp;</td>
  <td>U.03</td>
  <td> &nbsp;&nbsp;Richtlijnen voor programmacode &nbsp;&nbsp;(best practices) &nbsp;&nbsp;</td>
  <td>Richtlijnen voor programmacode(best practices)</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.04 &nbsp;&nbsp;</td>
  <td>U.04</td>
  <td> &nbsp;&nbsp;Analyse en specificatie &nbsp;&nbsp;van informatiesystemen &nbsp;&nbsp;</td>
  <td>Analyse en specificatie van informatiesystemen</td>
  <td> &nbsp;&nbsp;Cobit &nbsp;&nbsp;</td>
  <td>Cobit</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.05 &nbsp;&nbsp;</td>
  <td>U.05</td>
  <td> &nbsp;&nbsp;Analyse en specificatie &nbsp;&nbsp;van informatiebeveiligingseisen &nbsp;&nbsp;</td>
  <td>Analyse en specificatie van informatiebeveiligingseisen</td>
  <td> &nbsp;&nbsp;ISO27002:14.1.1 &nbsp;&nbsp;</td>
  <td>ISO27002:14.1.1</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.06 &nbsp;&nbsp;</td>
  <td>U.06</td>
  <td> &nbsp;&nbsp;Applicatie ontwerp &nbsp;&nbsp;</td>
  <td>Applicatie ontwerp</td>
  <td> &nbsp;&nbsp;SoGP &nbsp;&nbsp;</td>
  <td>SoGP</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.07 &nbsp;&nbsp;</td>
  <td>U.07</td>
  <td> &nbsp;&nbsp;Applicatiefunctionaliteiten &nbsp;&nbsp;(invoer, verwerking, uitvoer) &nbsp;&nbsp;</td>
  <td>Applicatiefunctionaliteiten(invoer, verwerking, uitvoer)</td>
  <td> &nbsp;&nbsp;ISO27002:12.2.1, 12.2.2, &nbsp;&nbsp;1.2.2.4, BIR 1.0 &nbsp;&nbsp;</td>
  <td>ISO27002:12.2.1, 12.2.2, 12.2.4, BIR 1.0</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.08 &nbsp;&nbsp;</td>
  <td>U.08</td>
  <td> &nbsp;&nbsp;Applicatiebouw &nbsp;&nbsp;</td>
  <td>Applicatiebouw</td>
  <td> &nbsp;&nbsp;SoGP &nbsp;&nbsp;</td>
  <td>SoGP</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.09 &nbsp;&nbsp;</td>
  <td>U.09</td>
  <td> &nbsp;&nbsp;Testen van &nbsp;&nbsp;systeembeveiliging &nbsp;&nbsp;</td>
  <td>Testen van systeembeveiliging</td>
  <td> &nbsp;&nbsp;ISO27002:14.2.8 &nbsp;&nbsp;</td>
  <td>ISO27002:14.2.8</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.10 &nbsp;&nbsp;</td>
  <td>U.10</td>
  <td> &nbsp;&nbsp;Systeemacceptatie tests &nbsp;&nbsp;</td>
  <td>Systeemacceptatie tests</td>
  <td> &nbsp;&nbsp;ISO27002:14.2.9 &nbsp;&nbsp;</td>
  <td>ISO27002:14.2.9</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.11 &nbsp;&nbsp;</td>
  <td>U.11</td>
  <td> &nbsp;&nbsp;Beschermen van &nbsp;&nbsp;testgegevens &nbsp;&nbsp;</td>
  <td>Beschermen van testgegevens</td>
  <td> &nbsp;&nbsp;ISO27002:14.3.1 &nbsp;&nbsp;</td>
  <td>ISO27002:14.3.1</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.12 &nbsp;&nbsp;</td>
  <td>U.12</td>
  <td> &nbsp;&nbsp;Beveiligde Ontwikkel- (en &nbsp;&nbsp;Test-)omgeving &nbsp;&nbsp;</td>
  <td>Beveiligde Ontwikkel- (en Test-)omgeving</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.6 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.6</td>
  <td> &nbsp;&nbsp;G &nbsp;&nbsp;</td>
  <td>G</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.13 &nbsp;&nbsp;</td>
  <td>U.13</td>
  <td> &nbsp;&nbsp;Applicatiekoppelingen &nbsp;&nbsp;</td>
  <td>Applicatiekoppelingen</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO25010, &nbsp;&nbsp;NIST CA &nbsp;&nbsp;</td>
  <td>ISO25010,NIST CA, CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;G &nbsp;&nbsp;</td>
  <td>G</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.14 &nbsp;&nbsp;</td>
  <td>U.14</td>
  <td> &nbsp;&nbsp;Logging en monitoring &nbsp;&nbsp;</td>
  <td>Logging en monitoring</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;G &nbsp;&nbsp;</td>
  <td>G</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.15 &nbsp;&nbsp;</td>
  <td>U.15</td>
  <td> &nbsp;&nbsp;Applicatie architectuur &nbsp;&nbsp;</td>
  <td>Applicatie architectuur</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO25010 &nbsp;&nbsp;</td>
  <td>ISO25010, CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;S &nbsp;&nbsp;</td>
  <td>S</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;U.16 &nbsp;&nbsp;</td>
  <td>U.16</td>
  <td> &nbsp;&nbsp;Tooling ontwikkelmethode &nbsp;&nbsp;</td>
  <td>Tooling ontwikkelmethode</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO25010 &nbsp;&nbsp;</td>
  <td>ISO25010, CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;S &nbsp;&nbsp;</td>
  <td>S</td>
</tr>
<tr>
<td></td>
<td> &nbsp;&nbsp;Nr &nbsp;&nbsp;</td>
<td> &nbsp;&nbsp;Objecten &nbsp;&nbsp;</td>
<td> &nbsp;&nbsp;Referentie &nbsp;&nbsp;</td>
<td> &nbsp;&nbsp;IFGS &nbsp;&nbsp;</td>
</tr>
  <tr>
  <tr>
  <td>Control domein</td>
  <td>Control-domein</td>
  <td> &nbsp;&nbsp;C.01 &nbsp;&nbsp;</td>
  <td>C.01</td>
  <td> &nbsp;&nbsp;Richtlijnen evaluatie ontwikkelactiviteiten &nbsp;&nbsp;</td>
  <td>Richtlijnen evaluatie ontwikkelactiviteiten</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO, &nbsp;&nbsp;ISO27002: 12.6.1 &nbsp;&nbsp;</td>
  <td>ISO27002: 12.6.1, CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;I &nbsp;&nbsp;</td>
  <td>I</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.02 &nbsp;&nbsp;</td>
  <td>C.02</td>
  <td> &nbsp;&nbsp;Versiebeheer &nbsp;&nbsp;</td>
  <td>Versiebeheer</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.03 &nbsp;&nbsp;</td>
  <td>C.03</td>
  <td> &nbsp;&nbsp;Patchmanagement van externe &nbsp;&nbsp;programmacode &nbsp;&nbsp;</td>
  <td>Patchmanagement van externe programmacode</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.04 &nbsp;&nbsp;</td>
  <td>C.04</td>
  <td> &nbsp;&nbsp;(Software)configuratie beheer &nbsp;&nbsp;</td>
  <td>(Software)configuratie beheer</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.05 &nbsp;&nbsp;</td>
  <td>C.05</td>
  <td> &nbsp;&nbsp;Quality assurance &nbsp;&nbsp;</td>
  <td>Quality management</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.06 &nbsp;&nbsp;</td>
  <td>C.06</td>
  <td> &nbsp;&nbsp;Compliance management &nbsp;&nbsp;</td>
  <td>Compliance Assurance</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.07 &nbsp;&nbsp;</td>
  <td>C.07</td>
  <td> &nbsp;&nbsp;Technische beoordeling van &nbsp;&nbsp;informatiesystemen na wijziging besturingsplatform &nbsp;&nbsp;</td>
  <td>Technische beoordeling van informatiesystemen na wijziging besturingsplatform</td>
  <td> &nbsp;&nbsp;ISO27002: 14.2.3 &nbsp;&nbsp;</td>
  <td>ISO27002: 14.2.3</td>
  <td> &nbsp;&nbsp;F &nbsp;&nbsp;</td>
  <td>F</td>
  </tr>
  </tr>
  <tr>
  <tr>
  <td></td>
  <td></td>
  <td> &nbsp;&nbsp;C.08 &nbsp;&nbsp;</td>
  <td>C.08</td>
  <td> &nbsp;&nbsp;Beheersing van &nbsp;&nbsp;softwareontwikkeling(sprojecten &nbsp;&nbsp;</td>
  <td>Beheersing van softwareontwikkeling(sprojecten</td>
  <td> &nbsp;&nbsp;CIP Domeingroep BIO &nbsp;&nbsp;</td>
  <td>CIP Domeingroep BIO</td>
  <td> &nbsp;&nbsp;S &nbsp;&nbsp;</td>
  <td>S</td>
  </tr>
  </tr>
<caption align="bottom">Applicatieontwikkeling, Overzicht objecten ingedeeld naar BUC</caption></table>
<caption align="bottom">Applicatieontwikkeling, Overzicht objecten ingedeeld naar BUC</caption></table>

Huidige versie van 19 okt 2021 om 16:44

Dit is een tabel bij BIO Thema-uitwerking Applicatieontwikkeling

Deze tabel behoort bij versie 1.0. In versie 2.0 is de tabel komen te vervallen.

ID Objecten Referentie IFGS
Beleidsdomein B.01 Beleid voor (beveiligd)ontwikkelen ISO27002: 14.2.1 I
B.02 Systeem ontwikkelmethode SoGP I
B.03 Classificatie van informatie ISO27002: 8.2.1 I
B.04 Engineeringprincipes voor beveiligde systemen ISO27002: 14.2.5 I
B.05 Business Impact Analyse(BIA) SoGP/IR2.2 I
B.06 Privacy en bescherming persoonsgegevens(GEB/DPIA) ISO27002:18.2.4, CIP Domeingroep BIO I
B.07 Kwaliteit managementsysteem CIP Domeingroep BIO F
B.08 Toegangsbeveiliging op programmacode ISO27002: 9.4.5 G
B.09 Projectorganisatie CIP Domeingroep BIO S
Uitvoeringsdomein U.01 Procedures voor wijzigingsbeheer m.b.t. applicaties en systemen ISO27002: 14.2.2 I
U.02 Beperkingen voor de installatie van software (richtlijnen) ISO27002: 12.6.2 I
U.03 Richtlijnen voor programmacode(best practices) CIP Domeingroep BIO I
U.04 Analyse en specificatie van informatiesystemen Cobit F
U.05 Analyse en specificatie van informatiebeveiligingseisen ISO27002:14.1.1 F
U.06 Applicatie ontwerp SoGP F
U.07 Applicatiefunctionaliteiten(invoer, verwerking, uitvoer) ISO27002:12.2.1, 12.2.2, 12.2.4, BIR 1.0 F
U.08 Applicatiebouw SoGP F
U.09 Testen van systeembeveiliging ISO27002:14.2.8 F
U.10 Systeemacceptatie tests ISO27002:14.2.9 F
U.11 Beschermen van testgegevens ISO27002:14.3.1 F
U.12 Beveiligde Ontwikkel- (en Test-)omgeving ISO27002: 14.2.6 G
U.13 Applicatiekoppelingen ISO25010,NIST CA, CIP Domeingroep BIO G
U.14 Logging en monitoring CIP Domeingroep BIO G
U.15 Applicatie architectuur ISO25010, CIP Domeingroep BIO S
U.16 Tooling ontwikkelmethode ISO25010, CIP Domeingroep BIO S
Control-domein C.01 Richtlijnen evaluatie ontwikkelactiviteiten ISO27002: 12.6.1, CIP Domeingroep BIO I
C.02 Versiebeheer CIP Domeingroep BIO F
C.03 Patchmanagement van externe programmacode CIP Domeingroep BIO F
C.04 (Software)configuratie beheer CIP Domeingroep BIO F
C.05 Quality management CIP Domeingroep BIO F
C.06 Compliance Assurance CIP Domeingroep BIO F
C.07 Technische beoordeling van informatiesystemen na wijziging besturingsplatform ISO27002: 14.2.3 F
C.08 Beheersing van softwareontwikkeling(sprojecten CIP Domeingroep BIO S
Applicatieontwikkeling, Overzicht objecten ingedeeld naar BUC