What are the certifications for secure software development?

S

sluge2016-08-29 10:30:16

Information Security

sluge, 2016-08-29 10:30:16

Hello everyone,
Does anyone know what certification programs are available for software developers in the field of security? Interested primarily in everything that relates to the development process, such as SDL.
Also wondering if there are any security certifications for software companies?

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

A

Andrew, 2016-08-29
@OLS

PA DSS

Y

Yuri Viktorovich, 2020-04-02
@rosteststandart

GOST R ISO/IEC 27001-2006 Information technology (IT). Methods and means of ensuring security. Information security management systems. Requirements
GOST R ISO/IEC 27013-2014 Information technology (IT). Methods and means of ensuring security. Guidelines for the joint use of ISO/IEC 27001 and ISO/IEC 20000-1
GOST R 53624-2009 Information technology (IT). Information and computing systems. Software. Quality management systems. Requirements
GOST R 54582-2011/ISO/IEC/TR 15443-2:2005 Information technology (IT). Methods and means of ensuring security. Fundamentals of trust in information technology security. Part 2. Methods of trust
GOST R dated December 01, 2011 No. 54582-2011
GOST R 54581-2011/ISO/IEC/TR 15443-1:2005 Information technology (IT). Methods and means of ensuring security. Fundamentals of trust in IT security. Part 1. Overview and Basics
GOST R dated December 01, 2011 No. 54581-2011
GOST R 56045-2014/ISO/IEC TR 27008:2011 Information technology (IT). Methods and means of ensuring security. Guidance for Auditors Regarding Information Security Controls and Management
GOST R dated June 11, 2014 No. 56045-2014
GOST R ISO/IEC 27033-3-2014 Information technology (IT). Methods and means of ensuring security. Network security. Part 3. Reference network scenarios. Threats, design methods and management issues
GOST R dated September 09, 2014 No. ISO / IEC 27033-3-2014
GOST R ISO/IEC 27031-2012 Information technology (IT). Methods and means of ensuring security. Information and Communication Technology Readiness Guide for Business Continuity (Reissue)
GOST R dated September 24, 2012 No. ISO / IEC 27031-2012
GOST R ISO/IEC 27013-2014 Information technology (IT). Methods and means of ensuring security. Guidelines for the joint use of ISO/IEC 27001 and ISO/IEC 20000-1
GOST R dated September 16, 2014 No. ISO / IEC 27013-2014
GOST R ISO/IEC 27007-2014 Information technology (IT). Methods and means of ensuring security. Guidance for Auditing Information Security Management Systems
GOST R dated June 11, 2014 No. ISO / IEC 27007-2014
GOST R ISO/IEC 27034-1-2014 Information technology (IT). Methods and means of ensuring security. Application security. Part 1. Overview and general concepts
GOST R dated June 11, 2014 No. ISO / IEC 27034-1-2014
GOST R 54583-2011/ISO/IEC/TR 15443-3:2007 Information technology (IT). Methods and means of ensuring security. Fundamentals of trust in information technology security. Part 3. Analysis of assurance methods
GOST R dated December 01, 2011 No. 54583-2011
GOST R ISO/IEC TO 13335-5-2006 Information technology (IT). Methods and means of ensuring security. Part 5: Network Security Management Guide
GOST R dated December 19, 2006 No. ISO / IEC TO 13335-5-2006
GOST R ISO/IEC 15408-2-2013 Information technology (IT). Methods and means of ensuring security. Criteria for evaluating information technology security. Part 2: Security functional components
GOST R dated November 08, 2013 No. ISO / IEC 15408-2-2013
GOST R ISO/IEC 15408-3-2013 Information technology (IT). Methods and means of ensuring security. Criteria for evaluating information technology security. Part 3: Security Assurance Components
GOST R dated November 08, 2013 No. ISO / IEC 15408-3-2013
GOST R ISO/IEC 13335-1-2006 Information technology (IT). Methods and means of ensuring security. Part 1: Information and telecommunications technology security management concepts and models (as amended)
GOST R dated December 19, 2006 No. ISO / IEC 13335-1-2006
GOST R ISO/IEC 27001-2006 Information technology (IT). Methods and means of ensuring security. Information security management systems. Requirements
GOST R dated December 27, 2006 No. ISO / IEC 27001-2006
GOST R ISO/IEC 27006-2008 Information technology (IT). Methods and means of ensuring security. Requirements for bodies carrying out audit and certification of information security management systems
GOST R dated December 18, 2008 No. ISO / IEC 27006-2008
GOST R ISO/IEC 15408-1-2012 Information technology (IT). Methods and means of ensuring security. Criteria for evaluating information technology security. Part 1. Introduction and general model
GOST R dated November 15, 2012 No. ISO / IEC 15408-1-2012
GOST R ISO/IEC 27000-2012 Information technology (IT). Methods and means of ensuring security. Information security management systems. General overview and terminology
GOST R dated November 15, 2012 No. ISO / IEC 27000-2012
GOST R ISO/IEC 27003-2012 Information technology (IT). Methods and means of ensuring security. Information security management systems. Information Security Management System Implementation Guide
GOST R dated November 15, 2012 No. ISO / IEC 27003-2012
GOST R ISO/IEC 18045-2013 Information technology (IT). Methods and means of ensuring security. Methodology for assessing information technology security
GOST R dated August 28, 2013 No. ISO / IEC 18045-2013
GOST R 58142-2018 Information technology (IT). Methods and means of ensuring security. Detailed analysis of software vulnerabilities in accordance with GOST R ISO / IEC 15408 and GOST R ISO / IEC 18045. Part 1. Use of available sources to identify potential vulnerabilities
GOST R dated May 24, 2018 No. 58142-2018
GOST R 58143-2018 Information technology (IT). Methods and means of ensuring security. Detailed analysis of software vulnerabilities in accordance with GOST R ISO / IEC 15408 and GOST R ISO / IEC 18045. Part 2. Penetration testing
GOST R dated May 24, 2018 No. 58143-2018
GOST R ISO/IEC 27037-2014 Information technology (IT). Methods and means of ensuring security. Guidelines for the identification, collection, acquisition and storage of digital evidence
GOST R dated September 09, 2014 No. ISO / IEC 27037-2014
GOST R ISO/IEC TO 18044-2007 Information technology (IT). Methods and means of ensuring security. Information security incident management
GOST R dated December 27, 2007 No. ISO / IEC TO 18044-2007
GOST R ISO/IEC 27005-2010 Information technology (IT). Methods and means of ensuring security. Information security risk management
GOST R dated November 30, 2010 No. ISO / IEC 27005-2010
GOST R ISO/IEC 27004-2011 Information technology (IT). Methods and means of ensuring security. Information security management. measurements
GOST R dated December 01, 2011 No. ISO / IEC 27004-2011
GOST R ISO/IEC 27002-2012 Information technology (IT). Methods and means of ensuring security. Code of Practice for Information Security Management
GOST R dated September 24, 2012 No. ISO / IEC 27002-2012
GOST R ISO/IEC 27011-2012 Information technology (IT). Methods and means of ensuring security. Information security management guidelines for telecommunications organizations based on ISO/IEC 27002
GOST R dated September 24, 2012 No. ISO / IEC 27011-2012
GOST R ISO/IEC 21827-2010 Information technology (IT). Methods and means of ensuring security. Design of security systems. Process maturity model
GOST R dated September 30, 2010 No. ISO / IEC 21827-2010
GOST R ISO/IEC 29100-2013 Information technology (IT). Methods and means of ensuring security. Privacy Basics
GOST R dated November 08, 2013 No. ISO / IEC 29100-2013
GOST R ISO/IEC TO 19791-2008 Information technology (IT). Methods and means of ensuring security. Safety assessment of automated systems
GOST R dated December 18, 2008 No. ISO / IEC TO 19791-2008
GOST R ISO/IEC 27033-1-2011 Information technology (IT). Methods and means of ensuring security. Network security. Part 1. Overview and concepts
GOST R dated December 01, 2011 No. ISO / IEC 27033-1-2011
GOST R 57628-2017 Information technology (IT). Methods and means of ensuring security. Guidance for developing protection profiles and security targets
GOST R dated August 25, 2017 No. 57628-2017