ISO 27001Toolkit

We are tasked to establish a document on Web Application Vulnerability Assessment on public facing websites as part of web application management. With reference to the toolkit we purchased, may we know what is the most similar document that we can use as a reference. The current process we have as follows: 1.            Information Security Manager conducts the web application vulnerability assessment on all public facing websites. 2.            The business owner(s) who owns the websites may nominate the web masters who will maintain and manage the updates/upgrades and remediation of all application related issues. 3.            Vulnerability scan report will be given to the Bu(s) and web masters (developers) by Information Security Manager. 4.            Vulnerabilities will be addressed by web masters (developers) with reference to the Detailed Scan Report. 5.            Re-scanning of the website will be conducted to check and verify mitigation made.