+APP.7.A7 Secure Acquisition of Individual Software (S)

APP.7.A7 Secure Acquisition of Individual Software (S)

A development project SHOULD be commissioned within the framework of the most suitable project management model. Security aspects SHOULD be taken into account during the tendering and awarding process to ensure the following:

  • only suitable contractors are commissioned
  • no wide-ranging conclusions about the organisation's security architecture can be drawn from publicly available information

The organisation SHOULD have defined processes and specified contact persons to ensure that the relevant framework conditions are considered.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information