Third-Party Development

Some organizations do not have the expertise necessary to do some custom software development. In recent times, it is common for organizations to hire companies to do web development. These and other third-party development projects represent potential security hazards that could expose your organization to problems. The policies you develop for third-party development should be designed to protect your organization.

Policy to Guarantee Integrity

When an organization outsources its software development, there has to be a concern over the integrity of the software that is the result of that development. How is the organization sure that this software will not contain undocumented features, backdoors, or other mechanisms ...

Get Writing Information Security Policies now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.