How to Secure Coding for Application with ISO/IEC 27001:2022

Abstract

The increasing advancement of information technology and its role in various organizations, both public and private, which organizations have important data and confidential information of the organization, has resulted in an increasing demand for information security care in order to prevent damages that may occur from various forms of threats that can invade and attack the organization's data.

ISO/IEC 27001:2022 is an international standard for information security management systems (Information Security Management System: ISMS). It has added 11 measures to control information security to cover more dimensions. This article has brought measures to control for writing secure codes to explain so that readers and those in the application or software development professions have a better understanding of writing secure codes. It uses 8 important points as guidelines for writing secure codes from the beginning to the end of the application or software development process.