ISO/IEC 27034 Foundation
Understand the fundamentals of application security and the ISO/IEC 27034 framework: the Organization and Application Normative Frameworks (ONF/ANF), security controls across the software lifecycle and the core concepts of confidentiality, integrity and availability.
Who is this course for?
- Individuals involved in application security or IT governance
- Professionals implementing or managing application security programs
- IT professionals, developers and managers responsible for safeguarding applications
- Anyone seeking foundational knowledge of ISO/IEC 27034
What you'll gain
- The PECB Certified ISO/IEC 27034 Foundation credential
- An understanding of application security concepts and ISO/IEC 27034
- Knowledge of the ONF/ANF and controls across the software lifecycle
- A solid base to progress towards the Lead Implementer level
Course programme
Day 1 · Introduction to application security and ISO/IEC 27034
- Core concepts: confidentiality, integrity, availability, threats and vulnerabilities
- Structure and components of ISO/IEC 27034 and related standards
Day 2 · Implementation and verification of controls
- Organization and Application Normative Frameworks (ONF/ANF)
- Validating requirements, assessing risks and verifying controls
- KPIs, continuous improvement and the official Foundation exam
Exam, credits & certification
After passing the exam, you can apply for the "PECB Certified ISO/IEC 27034 Foundation" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the level of the course according to PECB. Exam duration is indicative; ask me for the exact details when you enrol.
Your trainer

Ricardo Coronel Lemus
Over 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. I don't approach standards theoretically: I apply them day to day with real clients: that's what I bring to my coaching and exam preparation.
Frequently asked questions
Do I need any prerequisites?
What language is the exam in?
What is the difference between Self-Study and Self-Study + Coaching?
What if I don't pass the exam?
Do I need technical knowledge?
Ready to get certified in ISO/IEC 27034 Foundation?
Choose your option above and enrol online. A question or need some advice? Write to me or book a call.