Security requirements of information systems

6.11.1.1 Information security requirements analysis and specification The control, implementation guidance and other information stated in ISO/IEC 27002:2013, 14.1.1 applies.
6.11.1.2 Securing application services on public networks The control, implementation guidance and other information stated in ISO/IEC 27002:2013, 14.1.2 and the following additional guidance applies:
6.11.1.3 Protecting application services transactions The control, implementation guidance and other information stated in ISO/IEC 27002:2013, 14.1.3 applies.