Plan and lead audits of application-security processes using ISO/IEC 27034 guidance.
This advanced auditing course develops the ability to assess how application security is governed, implemented and maintained using the ISO/IEC 27034 series. It covers the organizational and application normative frameworks, application-security controls, audit preparation, evidence collection, reporting and follow-up. ISO/IEC 27034 provides application-security guidance; it is not an organizational certification standard.
Course at a glance
- Provider and awarding body: PECB.
- Learning format: PECB Self-Study (official course materials).
- Language: English.
- Level: Lead Auditor.
- Examination and certification-application cycle: 12 months from purchase for the first examination attempt, the included free retake if needed, and the certification application.
What this course includes
- Official PECB course materials for this programme.
- The first examination attempt and one free retake.
- The certification-application fee and the first year of the Annual Maintenance Fee, where applicable.
What you will learn
After completing the course, the learner should be able to:
- interpret ISO/IEC 27034 guidance from an auditor's perspective;
- evaluate application-security processes using recognized audit principles;
- plan, conduct, report and follow up an application-security audit;
- manage an application-security audit programme.
Who this course is for
- Auditors preparing to perform or lead application-security audits.
- Information-security and IT professionals responsible for application governance.
- Consultants and managers involved in compliance assessments.
- Members of application-security audit teams.
Prerequisites: PECB requires familiarity with application-security concepts and in-depth knowledge of application-security principles.
Course outline
- Introduction to application security and the ISO/IEC 27034 family of standards
- Initiating and preparing an application security audit
- Conducting an on-site application security audit
- Reporting, completing, and following up on the audit
- Certification exam
Exam and credential pathway
The examination covers application-security principles, audit concepts, audit initiation and preparation, audit conduct, and audit closure and follow-up. It does not turn ISO/IEC 27034 into an organizational certification standard.
Passing the examination enables an application to the applicable PECB ISO/IEC 27034 Application Security Auditor designation. The awarded designation depends on meeting the relevant professional and application-security experience requirements, together with application and ethics requirements.
Course completion, examination success, certification application and credential issuance are separate stages; the credential is not issued automatically.
For official course details, see the PECB ISO/IEC 27034 Lead Application Security Auditor page.
Access and activation
The 12-month period for the first examination, included free retake and certification application begins on the purchase date.
Each order covers one learner. Wadi Solutions begins processing the PECB registration within one business day, and activation details are sent to the learner's email. Required enrolment details are shared with PECB for activation.
Continue your learning path
Explore ISO/IEC 27034 — Application security courses to see the available options.
Before you buy
- If you do not have a myPECB account, create one here.
- If your myPECB email differs from the email used for your Wadi Solutions order, add your myPECB email to the order notes.