Our security testing in ISE for all version is according to requirements that are presented in CSDL. As part of it we comply with Product Security Baseline (PSB) requirements which define the security-related functionality, development process for all Cisco products. We also test ISE web applications for OWASP top 10 using multiple tools (like AppScan, Burp Proxy):
Cisco Secure Development Lifecycle - Cisco
