ISO 27034:

ISO 27034 provides guidance for organizations in integrating security into the processes used for managing their applications. It explicitly takes a process approach to specifying, designing, developing, testing, implementing and maintaining security functions and controls in application systems..... It defines application security not as a state of security but as “a process an organization can perform for applying controls and measurements to its applications in order the manage the risk of using them”