olemus
ISO/IEC 27034-1:
üleorganisatsiooniline sisestruktuur,
sisaldab rakenduse turbe normprotsesse ja -elemente
= organization-wide internal structure containing a set of normative application security processes and elements

ülevaateid
https://security.stackexchange.com/questions/184651/whats-the-difference-between-organization-normative-framework-and-applicatio

https://www.securitycompass.com/blog/detailed-guide-to-iso-27034/

http://www.opensamm.org/2012/04/mapping-samm-to-isoiec-27034/

standardid
https://www.iso.org/obp/ui/#iso:std:iso-iec:27034:-1:ed-1:v1:en
...
https://www.iso.org/obp/ui/#iso:std:iso-iec:27034:-5:ed-1:v1:en

vt ka
- rakenduse normkarkass