If the software development process is not sufficiently controlled by the client, there are a number of dangers, such as:

• Required security functions that are missing or only insufficiently implemented. This can result in a variety of risks that jeopardise the availability, confidentiality, and integrity of the data processed with the customised software.
• The development project may be delayed so that the individual software is not available in time.
• Priorities can be set incorrectly; for example, less critical functions can be developed extensively while urgently needed security functions are only implemented in a rudimentary way. This can also lead to project delays and a variety of security risks.

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)