T7.6.5 - OUTSOURCED SOFTWARE DEVELOPMENT Implemntation Guidance
The entity shall supervise outsourced software development.
Back to T7.6.5 - P3 - OUTSOURCED SOFTWARE DEVELOPMENT
Where software development is outsourced, the following points should be considered:
- A. Licensing arrangements, code ownership, and intellectual property rights
- B. Certification of the quality and accuracy of the work carried out
- C. Escrow arrangements in the event of failure of the third party
- D. Rights of access for audit of the quality and accuracy of work done
- E. Contractual requirements for quality and security functionality of code
- F. Testing before installation to detect malicious and Trojan code
