Course Overview
The PECB Certified ISO/IEC 27034 Lead Auditor training course provides participants with the skills and knowledge to audit application security processes based on ISO/IEC 27034 series.
Participants will learn to assess how application security is governed, implemented, and maintained, focusing on key ISO/IEC 27034 concepts such as the Organizational Normative Framework (ONF), Application Normative Framework (ANF), and Application Security Controls (ASCs). The course draws on auditing principles from ISO 19011 and ISO/IEC 17021-1 to support a structured approach to auditing application security. These standards are used as guidance rather than for certification, as ISO/IEC 27034 itself is not a certifiable standard.
Through practical exercises and scenario-based activities, participants will build competence in conducting application security audits in various organizational contexts.
Why Should You Attend?
As application security threats grow increasingly complex, organizations must ensure that all applications, whether internally developed, outsourced, or commercially purchased, are properly secured throughout their lifecycle. ISO/IEC 27034 provides structured guidance for achieving this.
By attending this course, participants will gain the skills to plan, manage, and report on audit activities; evaluate an organization’s ONF, its processes, and components associated with application security, the application security management process (ASMP), and the application’s level of trust.
This training is ideal for professionals seeking to enhance their auditing capabilities, contribute to organizational compliance, and support the ongoing development of application security practices.
Who Should Attend?
This training course is intended for:
Auditors seeking to perform and lead audits of application security processes
Information security and IT professionals responsible for application security governance
Consultants and managers involved in application security compliance assessments
Members of audit teams and individuals preparing for ISO/IEC 27034 application security audit
Learning Objectives
Upon completing this training course, participants will be able to:
Explain the fundamental concepts and principles of application security based on ISO/IEC 27034
Interpret the ISO/IEC 27034 guidelines for application security from the perspective of an auditor
Evaluate the application security conformity to ISO/IEC 27034 guidelines, in accordance with the fundamental audit concepts and principles
Plan, conduct, and close an ISO/IEC 27034 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO 19011 guidelines, and other best practices of auditing
Manage an ISO/IEC 27034 audit program
Educational Approach
This training course includes essay-type exercises, multiple-choice quizzes, examples and best practices used in application security.
Participants are strongly encouraged to interact with one another, exchange ideas, and actively participate in discussions.
The quiz structure within the course closely mirrors that of the certification exam, ensuring participants are well-prepared for the exam.
Prerequisites
Participants who attend this course must be familiar with application security concepts and have in-depth knowledge of application security principles.
The course covers five days of content, with the certification exam on the fifth day. In the self-study format you cover the same material at your own pace.
Yes. The course fee includes the PECB certification and examination fees, plus one free exam retake within 12 months.
Participants who attend this course must be familiar with application security concepts and have in-depth knowledge of application security principles.
It is available as self-study (English). Choose the format and language before adding the course to your cart.
There is no scheduled live class for this course at the moment. Organizations that want a dedicated live session can contact us at [email protected].
PECB issues the certificate. After passing the exam you can apply for the “PECB Certified ISO/IEC 27034 Lead Application Security Auditor” credential. Horus Academy is a PECB Authorized Silver Partner and does not issue the certificate itself.
[{“@context”: “https://schema.org”, “@type”: “Course”, “@id”: “https://horus.academy/course/iso-iec-27034-lead-application-security-auditor/#course”, “name”: “ISO/IEC 27034 Lead Application Security Auditor”, “description”: “The PECB Certified ISO/IEC 27034 Lead Auditor training course provides participants with the skills and knowledge to audit application security processes based on ISO/IEC 27034 series.”, “url”: “https://horus.academy/course/iso-iec-27034-lead-application-security-auditor/”, “inLanguage”: [“en”], “provider”: {“@type”: “Organization”, “@id”: “https://horus.academy/#organization”, “name”: “Horus Academy”, “url”: “https://horus.academy/”}, “educationalCredentialAwarded”: “PECB Certified ISO/IEC 27034 Lead Application Security Auditor”, “hasCourseInstance”: [{“@type”: “CourseInstance”, “courseMode”: “Online”, “name”: “ISO/IEC 27034 Lead Application Security Auditor – self-paced”}]}, {“@context”: “https://schema.org”, “@type”: “FAQPage”, “@id”: “https://horus.academy/course/iso-iec-27034-lead-application-security-auditor/#faq”, “mainEntity”: [{“@type”: “Question”, “name”: “How long is the ISO/IEC 27034 Lead Application Security Auditor course?”, “acceptedAnswer”: {“@type”: “Answer”, “text”: “The course covers five days of content, with the certification exam on the fifth day. In the self-study format you cover the same material at your own pace.”}}, {“@type”: “Question”, “name”: “Is the exam included in the price?”, “acceptedAnswer”: {“@type”: “Answer”, “text”: “Yes. The course fee includes the PECB certification and examination fees, plus one free exam retake within 12 months.”}}, {“@type”: “Question”, “name”: “What are the prerequisites for ISO/IEC 27034 Lead Application Security Auditor?”, “acceptedAnswer”: {“@type”: “Answer”, “text”: “Participants who attend this course must be familiar with application security concepts and have in-depth knowledge of application security principles.”}}, {“@type”: “Question”, “name”: “Which formats and languages is ISO/IEC 27034 Lead Application Security Auditor available in?”, “acceptedAnswer”: {“@type”: “Answer”, “text”: “It is available as self-study (English). Choose the format and language before adding the course to your cart.”}}, {“@type”: “Question”, “name”: “Is there a live class for ISO/IEC 27034 Lead Application Security Auditor?”, “acceptedAnswer”: {“@type”: “Answer”, “text”: “There is no scheduled live class for this course at the moment. Organizations that want a dedicated live session can contact us at [email protected].”}}, {“@type”: “Question”, “name”: “Who issues the certificate?”, “acceptedAnswer”: {“@type”: “Answer”, “text”: “PECB issues the certificate. After passing the exam you can apply for the “PECB Certified ISO/IEC 27034 Lead Application Security Auditor” credential. Horus Academy is a PECB Authorized Silver Partner and does not issue the certificate itself.”}}]}]
After successfully passing the exam, you can apply for the “PECB Certified ISO/IEC 27034 Lead Application Security Auditor” credential. PECB sets the credential level according to your professional experience, and every credential requires signing the PECB Code of Ethics.
