The Open Web Application Security Project (OWASP) is a non-profit foundation dedicated to improving software security. It provides a set of principles, tools, and documentation for developing, purchasing, and maintaining secure software and applications. Its most well-known project, the "OWASP Top 10," is a standard awareness document for developers and web application security professionals. It represents a broad consensus about the most critical security risks to web applications, making OWASP the definitive answer for a set of principles addressing top application security risks.

B) ISO/IEC 27001: This is a broad information security management system (ISMS) standard, not one focused specifically on software development principles or application-level risks.

C) NIST Cybersecurity Framework: This provides high-level guidance for managing cybersecurity risk across an entire organization, not specific principles for secure software development.

D) COBIT: This is a framework for the governance and management of enterprise IT; it is much broader than application security development principles.

1. OWASP Foundation. (n.d.). About The Open Web Application Security Project. Retrieved from owasp.org. The official site states its mission is to make software security visible, so that individuals and organizations can make informed decisions.

2. Katsigiannis, S., & Vidas, T. (2020). A systematic mapping study of the OWASP Top 10. Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, 19-32. https://doi.org/10.1145/3372297.3423363. This academic paper establishes the OWASP Top 10 as a foundational set of principles in the application security domain.