Commissioning unsuitable software developers can lead to a variety of risks:

• A lack of technical expertise (e.g. in the programming language, frameworks, or planned technical operational environment) can lead to many avoidable software vulnerabilities.
• A lack of knowledge of project management and requirements engineering can lead to friction in coordination processes, and thus to considerable delays. This can also lead to focus in the wrong areas and essential security functions not being implemented with the required priority. Unsuitable software developers can be commissioned due to overly tight and unrealistic cost calculations, for example. Errors, misleading requirements, and incorrect objectives in tenders can also lead to this.

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)