ISO/IEC TR 24772-3:2020
Programming languages - Guidance to avoiding vulnerabilities in programming languages - Part 3: C
Available Formats:
- Availability: Immediate Download
- Language: English
- License Type: Single User
- Updates: Not Included
- Availability: Request Quote
- Language: English
- License Type: Enterprise / Multi User
- Updates: Included
About This Item
ISO/IEC TR 24772-3:2020 provides guidance to avoid vulnerabilities in programming languages, with a specific focus on C. For teams responsible for secure software development, code review, procurement, or conformity assessment, it offers a technical document that can support risk management and engineering validation when C is used in safety-, security-, or reliability-sensitive systems. As a part of ISO/IEC TR 24772, it is best understood as a supporting reference for evaluating language-related weaknesses and improving documented evaluation practices across the development workflow.
Overview of ISO/IEC TR 24772-3:2020
ISO/IEC TR 24772-3:2020 addresses common vulnerability patterns associated with the C programming language and explains how they may be avoided in practice. The document is relevant where software quality workflows depend on technical review, secure coding guidance, and controlled implementation methods. It can help organizations align engineering documentation with known language risks, especially when preparing a compliance reference for embedded systems, product evaluation, or software assurance activities. Its role is typically advisory, supporting structured assessment rather than defining a conformance test.
Compliance applications of ISO/IEC TR 24772-3:2020
In compliance workflows, ISO/IEC TR 24772-3:2020 may be used during code specification review, secure development planning, and verification activities for C-based applications. It is often useful in environments where software supports electrical equipment, industrial control systems, or other engineered products that require disciplined technical validation. Procurement teams and laboratories may also use it as a reference when comparing development requirements, reviewing coding practices, or preparing conformity assessment evidence. The document supports consistency in testing workflows and helps frame vulnerability-focused technical assessment.
Importance of compliance with ISO/IEC TR 24772-3:2020
Using ISO/IEC TR 24772-3:2020 can reduce implementation risk by identifying language features and usage patterns that commonly lead to defects or security weaknesses. That matters for safety, interoperability, and operational consistency, particularly where C code is deployed in long-life or tightly controlled systems. For engineering and procurement teams, the document can support clearer requirements, more reliable technical validation, and better preparation for conformity assessment. It also strengthens quality assurance by making vulnerability avoidance part of documented evaluation and review processes.
- Guidance focused on avoiding vulnerabilities associated with the C programming language
- Useful for secure coding review, technical assessment, and software assurance planning
- Supports engineering documentation and risk management in C-based development workflows
- Relevant to compliance preparation, verification activities, and conformity assessment evidence
- Publication Date: 2020-05-20
- Standard Status: Derived
- Publisher: IEC
- Edition: 1
- This Version: ISO/IEC TR 24772 (2020-05-20)
- Previous Version: ISO/IEC TR 24772 (2020-02-04)
Please request information about the document. Contact Page
Need This Standard?
Request a personalized quote today to receive the latest edition in PDF or other available formats.
Need This Standard?
Request a personalized quote today to receive the latest edition in PDF or other available formats.
Summarize with AI
Get quick summaries using your favorite AI engine.
Online Standart Disclaimer
OnlineStandart.com is an authorized reseller of international standards, operating through partnerships with authorized distributors. We do not own the copyrights or trademarks of the standards we sell, including but not limited to those of API, ASHRAE, BSI, SAE, ASTM, IEEE, IEC, ASME, ISO, and others.
All product names, logos, and brands are the property of their respective owners and are used for identification purposes only; their use does not imply endorsement. OnlineStandart.com is not affiliated with or endorsed by any standards development organization unless explicitly stated. The content of this document is for informational purposes only and is intended to promote our licensed reselling services.
Online Standart does not host, distribute, or link to free, unlicensed, or uncertified copies of copyrighted standards. Every document we deliver is a licensed copy obtained through authorized channels and supplied with full licensing documentation. The “Free PDF Download” option on our product pages refers to this free informational document — never to a free copy of any standard.