+APP.6.A3 Secure Procurement of Software [Procurement Department] (B)

APP.6.A3 Secure Procurement of Software [Procurement Department] (B)

During the procurement process, suitable software MUST be selected based on the requirements catalogue. The selected software MUST be procured from a trusted source. The trusted source SHOULD provide a means of verifying the integrity of the software.

Furthermore, the software SHOULD be procured with a suitable maintenance contract or a comparable commitment from the manufacturer or software provider. In particular, these contracts or commitments SHOULD guarantee that any vulnerabilities or security flaws that emerge in the software will be promptly remedied throughout the period of use.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.39 Malware