+APP.1.1.A10 Regulations for Software Development by End Users (S)

APP.1.1.A10 Regulations for Software Development by End Users (S)

For software development based on Office applications (e.g. with macros), binding regulations SHOULD be established (see also APP.1.1.A2 Limiting Active Content). First, every organisation SHOULD make a policy decision as to whether or not it wants to allow in-house development of this kind by end users at all. The decision SHOULD be documented in the corresponding security policies. If custom developments are permitted, a process for handling corresponding features of the Office products SHOULD be created for the end users. Responsibilities SHOULD be clearly defined. All information pertaining to the applications created SHOULD be documented. Current versions of the regulations SHOULD be made available to and observed by all affected users in a timely manner.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.28 Software Vulnerabilities or Errors