What are the certifications for secure software development?

Question

Information Security

Hello everyone,
Does anyone know what certification programs are available for software developers in the field of security? Interested primarily in everything that relates to the development process, such as SDL.
Also wondering if there are any security certifications for software companies?

Answer 1

PA DSS

Answer 2

• GOST R ISO/IEC 27001-2006 Information technology (IT). Methods and means of ensuring security. Information security management systems. Requirements
  
• GOST R ISO/IEC 27013-2014 Information technology (IT). Methods and means of ensuring security. Guidelines for the joint use of ISO/IEC 27001 and ISO/IEC 20000-1
  
• GOST R 53624-2009 Information technology (IT). Information and computing systems. Software. Quality management systems. Requirements
  
• GOST R 54582-2011/ISO/IEC/TR 15443-2:2005 Information technology (IT). Methods and means of ensuring security. Fundamentals of trust in information technology security. Part 2. Methods of trust
  
• GOST R dated December 01, 2011 No. 54582-2011
  
• GOST R 54581-2011/ISO/IEC/TR 15443-1:2005 Information technology (IT). Methods and means of ensuring security. Fundamentals of trust in IT security. Part 1. Overview and Basics
  
• GOST R dated December 01, 2011 No. 54581-2011
  
• GOST R 56045-2014/ISO/IEC TR 27008:2011 Information technology (IT). Methods and means of ensuring security. Guidance for Auditors Regarding Information Security Controls and Management
  
• GOST R dated June 11, 2014 No. 56045-2014
  
• GOST R ISO/IEC 27033-3-2014 Information technology (IT). Methods and means of ensuring security. Network security. Part 3. Reference network scenarios. Threats, design methods and management issues
  
• GOST R dated September 09, 2014 No. ISO / IEC 27033-3-2014
  
• GOST R ISO/IEC 27031-2012 Information technology (IT). Methods and means of ensuring security. Information and Communication Technology Readiness Guide for Business Continuity (Reissue)
  
• GOST R dated September 24, 2012 No. ISO / IEC 27031-2012
  
• GOST R ISO/IEC 27013-2014 Information technology (IT). Methods and means of ensuring security. Guidelines for the joint use of ISO/IEC 27001 and ISO/IEC 20000-1
  
• GOST R dated September 16, 2014 No. ISO / IEC 27013-2014
  
• GOST R ISO/IEC 27007-2014 Information technology (IT). Methods and means of ensuring security. Guidance for Auditing Information Security Management Systems
  
• GOST R dated June 11, 2014 No. ISO / IEC 27007-2014
  
• GOST R ISO/IEC 27034-1-2014 Information technology (IT). Methods and means of ensuring security. Application security. Part 1. Overview and general concepts
  
• GOST R dated June 11, 2014 No. ISO / IEC 27034-1-2014
  
• GOST R 54583-2011/ISO/IEC/TR 15443-3:2007 Information technology (IT). Methods and means of ensuring security. Fundamentals of trust in information technology security. Part 3. Analysis of assurance methods
  
• GOST R dated December 01, 2011 No. 54583-2011
  
• GOST R ISO/IEC TO 13335-5-2006 Information technology (IT). Methods and means of ensuring security. Part 5: Network Security Management Guide
  
• GOST R dated December 19, 2006 No. ISO / IEC TO 13335-5-2006
  
• GOST R ISO/IEC 15408-2-2013 Information technology (IT). Methods and means of ensuring security. Criteria for evaluating information technology security. Part 2: Security functional components
  
• GOST R dated November 08, 2013 No. ISO / IEC 15408-2-2013
  
• GOST R ISO/IEC 15408-3-2013 Information technology (IT). Methods and means of ensuring security. Criteria for evaluating information technology security. Part 3: Security Assurance Components
  
• GOST R dated November 08, 2013 No. ISO / IEC 15408-3-2013
  
• GOST R ISO/IEC 13335-1-2006 Information technology (IT). Methods and means of ensuring security. Part 1: Information and telecommunications technology security management concepts and models (as amended)
  
• GOST R dated December 19, 2006 No. ISO / IEC 13335-1-2006
  
• GOST R ISO/IEC 27001-2006 Information technology (IT). Methods and means of ensuring security. Information security management systems. Requirements
  
• GOST R dated December 27, 2006 No. ISO / IEC 27001-2006
  
• GOST R ISO/IEC 27006-2008 Information technology (IT). Methods and means of ensuring security. Requirements for bodies carrying out audit and certification of information security management systems
  
• GOST R dated December 18, 2008 No. ISO / IEC 27006-2008
  
• GOST R ISO/IEC 15408-1-2012 Information technology (IT). Methods and means of ensuring security. Criteria for evaluating information technology security. Part 1. Introduction and general model
  
• GOST R dated November 15, 2012 No. ISO / IEC 15408-1-2012
  
• GOST R ISO/IEC 27000-2012 Information technology (IT). Methods and means of ensuring security. Information security management systems. General overview and terminology
  
• GOST R dated November 15, 2012 No. ISO / IEC 27000-2012
  
• GOST R ISO/IEC 27003-2012 Information technology (IT). Methods and means of ensuring security. Information security management systems. Information Security Management System Implementation Guide
  
• GOST R dated November 15, 2012 No. ISO / IEC 27003-2012
  
• GOST R ISO/IEC 18045-2013 Information technology (IT). Methods and means of ensuring security. Methodology for assessing information technology security
  
• GOST R dated August 28, 2013 No. ISO / IEC 18045-2013
  
• GOST R 58142-2018 Information technology (IT). Methods and means of ensuring security. Detailed analysis of software vulnerabilities in accordance with GOST R ISO / IEC 15408 and GOST R ISO / IEC 18045. Part 1. Use of available sources to identify potential vulnerabilities
  
• GOST R dated May 24, 2018 No. 58142-2018
  
• GOST R 58143-2018 Information technology (IT). Methods and means of ensuring security. Detailed analysis of software vulnerabilities in accordance with GOST R ISO / IEC 15408 and GOST R ISO / IEC 18045. Part 2. Penetration testing
  
• GOST R dated May 24, 2018 No. 58143-2018
  
• GOST R ISO/IEC 27037-2014 Information technology (IT). Methods and means of ensuring security. Guidelines for the identification, collection, acquisition and storage of digital evidence
  
• GOST R dated September 09, 2014 No. ISO / IEC 27037-2014
  
• GOST R ISO/IEC TO 18044-2007 Information technology (IT). Methods and means of ensuring security. Information security incident management
  
• GOST R dated December 27, 2007 No. ISO / IEC TO 18044-2007
  
• GOST R ISO/IEC 27005-2010 Information technology (IT). Methods and means of ensuring security. Information security risk management
  
• GOST R dated November 30, 2010 No. ISO / IEC 27005-2010
  
• GOST R ISO/IEC 27004-2011 Information technology (IT). Methods and means of ensuring security. Information security management. measurements
  
• GOST R dated December 01, 2011 No. ISO / IEC 27004-2011
  
• GOST R ISO/IEC 27002-2012 Information technology (IT). Methods and means of ensuring security. Code of Practice for Information Security Management
  
• GOST R dated September 24, 2012 No. ISO / IEC 27002-2012
  
• GOST R ISO/IEC 27011-2012 Information technology (IT). Methods and means of ensuring security. Information security management guidelines for telecommunications organizations based on ISO/IEC 27002
  
• GOST R dated September 24, 2012 No. ISO / IEC 27011-2012
  
• GOST R ISO/IEC 21827-2010 Information technology (IT). Methods and means of ensuring security. Design of security systems. Process maturity model
  
• GOST R dated September 30, 2010 No. ISO / IEC 21827-2010
  
• GOST R ISO/IEC 29100-2013 Information technology (IT). Methods and means of ensuring security. Privacy Basics
  
• GOST R dated November 08, 2013 No. ISO / IEC 29100-2013
  
• GOST R ISO/IEC TO 19791-2008 Information technology (IT). Methods and means of ensuring security. Safety assessment of automated systems
  
• GOST R dated December 18, 2008 No. ISO / IEC TO 19791-2008
  
• GOST R ISO/IEC 27033-1-2011 Information technology (IT). Methods and means of ensuring security. Network security. Part 1. Overview and concepts
  
• GOST R dated December 01, 2011 No. ISO / IEC 27033-1-2011
  
• GOST R 57628-2017 Information technology (IT). Methods and means of ensuring security. Guidance for developing protection profiles and security targets
  
• GOST R dated August 25, 2017 No. 57628-2017