HomeStandards › ISO 27001 (mobile)

Framework

ISO 27001 and mobile apps

How does ISO 27001 relate to mobile apps?

ISO 27001 is the international standard for managing information security. It is broader than mobile, but several of its controls touch how you build and test software, including secure development and managing technical vulnerabilities.

If your app handles sensitive data, testing it and acting on the findings is part of demonstrating those controls work in practice.

How Mobexa helps

Mobexa gives you repeatable testing of mobile builds and signed, exportable evidence of the findings and how they were handled. That evidence supports the secure-development and vulnerability-management controls an ISO 27001 audit looks at.

Common questions

Is ISO 27001 specific to mobile apps?
No. ISO 27001 covers information security across an organisation. Mobile app testing supports specific controls within it, such as secure development and vulnerability management.

Mobexa maps every finding on your Android and iOS builds to ISO 27001 (mobile) and the other standards an auditor recognises.

Start Free Trial