For organisations that design, develop or maintain software applications (or technical solutions with embedded software), they will need to demonstrate that the underlying code has been developed and managed securely. This policy template addresses this requirement, and assists in addressing relevant security controls within the ISO 27001 standard.