The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.