Back to all 93 controls
    Annex A 8.26
    Technological

    A.8.26 Application security requirements

    Define application security requirements.

    What good looks like

    Security requirements captured for new/changed applications.

    Evidence an auditor will ask for

    Requirements docs, sign-offs.

    Document template for this control

    The Secure Development Policy template gives you auditor-ready wording that fulfils Annex A 8.26. Preview the full document before you download the editable version.