Establish and improve an application-security programme based on ISO/IEC 27034.
This advanced implementation course develops the ability to establish and maintain an application-security programme based on ISO/IEC 27034. It connects the organizational and application normative frameworks with security requirements, controls, the application security life cycle, incident response, verification, monitoring and continual improvement.
Course at a glance
- Provider and awarding body: PECB.
- Learning format: PECB Self-Study (official course materials).
- Language: English.
- Level: Lead Implementer.
- Examination and certification-application cycle: 12 months from purchase for the first examination attempt, the included free retake if needed, and the certification application.
What this course includes
- More than 450 pages of official PECB instructional materials containing explanations, guidance and practical examples.
- The first examination attempt and one free retake.
- The certification-application fee and the first year of the Annual Maintenance Fee, where applicable.
- A course-completion attestation worth 31 CPD credits, separate from the PECB professional credential.
What you will learn
After completing the course, the learner should be able to:
- interpret ISO/IEC 27034 guidance from an implementer's perspective;
- plan and initiate an application-security programme;
- implement application-security controls and incident-response practices;
- monitor, audit and continually improve the programme.
Who this course is for
- Application-security professionals and programme owners.
- IT and information-security managers responsible for secure development.
- Developers, architects, risk managers and compliance professionals.
- Consultants supporting ISO/IEC 27034 implementation.
Prerequisites: PECB expects general knowledge of application-security concepts and ISO/IEC 27034.
Course outline
- Introduction to application security and ISO/IEC 27034
- Planning the implementation of ISO/IEC 27034
- Implementation of ISO/IEC 27034 and incident management and response
- Monitoring, continual improvement, and security audits
- Certification exam
Exam and credential pathway
The exam covers application-security principles, planning, control implementation, incident response, verification, monitoring, continual improvement and auditing.
Passing the examination enables an application to the applicable PECB ISO/IEC 27034 Implementer designation. Higher designations require the specified professional and application-security project experience, in addition to application and ethics requirements.
Course completion, examination success, certification application and credential issuance are separate stages; the credential is not issued automatically.
For official course details, see the PECB ISO/IEC 27034 Lead Application Security Implementer page.
Access and activation
The 12-month period for the first examination, included free retake and certification application begins on the purchase date.
Each order covers one learner. Wadi Solutions begins processing the PECB registration within one business day, and activation details are sent to the learner's email. Required enrolment details are shared with PECB for activation.
Continue your learning path
Explore ISO/IEC 27034 — Application security courses to see the available options.
Before you buy
- If you do not have a myPECB account, create one here.
- If your myPECB email differs from the email used for your Wadi Solutions order, add your myPECB email to the order notes.