scope:

This document provides a detailed description of an application security process to develop, validate, implement, verify, and continuously improve verification schemes used to audit and verify application security in an organization.

Application security validation can be done on a verification scheme to validate and verify if it clearly defines clear AS requirements and AS controls to mitigate all risks to acceptable levels and reach application security objectives for specific contexts and environments.

Application security verification and audit can be done on an organization or an application, to verify if it complies with a verification scheme.