ISO/IEC 27001:2022/Technological controls/115 of 123
A.8.26Application security requirements
Control family: Technological controls
Control description
Information security requirements shall be identified, specified and approved when developing or acquiring applications
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.