EasyELEarning Academy · PECB Authorized Partner
ISO/IEC 27034 Foundation – Application Security
Understand application security. Assess risks systematically.
Build a sound foundation for secure applications, from development to operation. Explore the core concepts, frameworks and processes of ISO/IEC 27034 and prepare for the PECB Foundation examination.
Duration
2 daysDelivery
Live online or in personCredential
PECB examination & certificationYour learning outcomes
After the course, you will be able to explain the principles of application security, distinguish organisational and application-specific requirements, and describe the role of security controls throughout an application’s lifecycle.
What you will learn
- Structure and purpose of the ISO/IEC 27034 series
- Confidentiality, integrity and availability of applications
- Threats, vulnerabilities and application-related risks
- Organization Normative Framework (ONF) and Application Normative Framework (ANF)
- Application Security Controls: planning, documenting and verifying security measures
- Roles, responsibilities and continual improvement
Choose your learning format
| Format | Duration | Who is it for? |
|---|---|---|
| Online | 2 days of live training | Learn with a trainer, ask questions and discuss the topics directly. |
| On-site | 2 days of classroom training | Face-to-face interaction and collaborative learning in the training room. |
| Self-study + 4 h exam preparation | Independent learning with official materials plus 4 hours of live preparation; examination held separately | For participants who prefer to organise their own study time and address specific questions. |
Please note: The four hours supplement self-study; they are not a complete Foundation course condensed into four hours. Additional independent study is required. The price of your selected option is shown when booking.
Audience and prerequisites
For software developers, IT professionals, project managers and staff working in information security, governance and quality assurance. There are no formal prerequisites. Basic IT and software development knowledge is helpful.
Materials, examination and certificate
Includes official PECB training materials, tuition in your selected format, and registration and fees for the one-hour PECB examination. After passing the examination and meeting PECB requirements, you can apply for the “PECB Certificate Holder in ISO/IEC 27034 Foundation” credential. Attendance alone does not automatically lead to a PECB certificate.
How you learn with us
All instructor-led sessions are delivered live. Online sessions use alfaview; our Odoo learning portal provides course information and a materials overview. Course dates, teaching language and the location of classroom sessions are agreed before the course starts.
Teaching and examination language
Teaching languages: German, English or Hungarian. The selected teaching language is confirmed when scheduling the course. Hungarian is a teaching language for this PECB course only and is not a promised examination language. The examination language and the language of official PECB materials are agreed separately before booking.
Self-employed? Check KOMPASS before booking.
Arrange a consultation with us first to discuss a suitable course. Mandatory funding advice and eligibility assessment are provided by an official KOMPASS advice centre. Make a binding booking only after your qualification voucher has been issued. Requirements include at least 20 hours of qualification. Eligibility for this offer therefore needs an individual assessment; the four-hour preparation alone does not meet this minimum.
Frequently asked questions about this course
Can I take Foundation without a development background?
Yes. PECB specifies no prerequisites. The focus is basic concepts and a shared language for application security.
Does this apply only to software we develop ourselves?
No. ISO/IEC 27034 also covers acquired applications and outsourced development or operation.
What do ONF and ANF mean in plain language?
The ONF gathers organisation-wide guidance. The ANF brings together the controls and evidence selected for one application.
Is a penetration test before launch enough?
A penetration test is an important snapshot. Requirements, architecture review, secure development and repeated testing complement it throughout the lifecycle.
How does OWASP ASVS fit in?
ASVS defines verifiable technical security requirements for web applications. It helps turn broad security goals into specific checks.
Does my Foundation certificate prove that our app is secure?
No. The certificate concerns your knowledge. It neither assesses nor certifies the security of a particular application.
How much time should I allow for the full Foundation course?
At EasyELEarning Academy, the full course takes two days including the exam. Choose live online or classroom delivery; the four-hour preparation option is a separate, shorter variant.
Can I learn the fundamentals in Hungarian?
Yes, Hungarian is available as a teaching language by arrangement. We confirm the PECB exam and official material languages separately before booking.
Selected courses compared
Which content fits your goals, which skills are practised, and what does the credential demonstrate? This selection compares our course with two specific alternatives.
On smaller screens, scroll the table sideways to see all columns.
| Course offer | Content | Skills development | What the credential demonstrates |
|---|---|---|---|
| EasyELEarning Academy This course offer | Application security fundamentals, risks, organisational and application frameworks, and controls throughout the software lifecycle are explored with an instructor using the PECB programme. | You learn to interpret application security requirements, explain essential terminology clearly, and support colleagues in planning and checking appropriate protective controls. | The PECB Foundation credential requires a passed examination and certificate application. It demonstrates foundational knowledge; professional, audit or project experience is not required. |
| Schönbrunn TASC PECB ISO/IEC 27034 Foundation The same PECB programme through another training provider. Provider’s courseAdditional source | The course covers application security across the software lifecycle, ONF and ANF frameworks, threats, vulnerabilities, and checking appropriate controls against ISO/IEC 27034. | You practise interpreting security risks and describing or checking controls. Exercises, case studies and quizzes support an introduction to the standards series. | TASC identifies a multiple-choice examination and the Certificate Holder in ISO/IEC 27034 Foundation award. PECB issues this evidence of foundational knowledge. |
| MyISOCertification PECB ISO/IEC 27034 Foundation – Self-study The same PECB programme through self-study. Provider’s courseAdditional source | This self-study offer introduces application security and ISO/IEC 27034 through official PECB materials, before addressing the implementation and verification of application security controls. | You work through the content independently and develop a foundational understanding of controls. The provider specifies no scheduled teaching sessions or instructor. | The package includes PECB exam attempts and the application fee. The Foundation credential follows PECB requirements; purchasing access does not establish successful assessment. |
Checked: 31 October 2026. Based on the linked provider information. This selection is not a complete market overview. Related courses are identified; scope, entry requirements, teaching languages and examination languages may differ. The table describes learning objectives and credential types, without guaranteeing learning outcomes or general equivalence. Current offer and certification conditions apply. Official course names retain their original wording.