olemus

ISO/IEC 27034:
vajalikuks loetav rakenduse turvameetmestik selle rakenduse riski vähendamiseks vastuvõetava või talutava tasemeni,
rakenduse omaniku otsusega pärast rakenduse riskianalüüsi
= name or label of a set of application security controls deemed necessary by the application owner to lower the risk associated with a specific application to an acceptable (or tolerable) level, following an application security risk analysis