This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Category:OWASP Legal Project"

From OWASP
Jump to: navigation, search
Line 1: Line 1:
−
<br>
+
 
−
{{OWASP Book|4037498}}
+
{{ProjectTabs |  
−
<br>
+
Proj_About=  
−
{{:Project Information:template OWASP Legal Project}}
+
[[Image:Legal-bannerbug.JPG|200px|right]]
−
[[Category:OWASP Project]]
+
'''How can the legal project help me?'''
−
[[Category:OWASP Document]]
 
−
[[Category:OWASP Download]]
 
−
[[Category:OWASP Release Quality Document]]
 
−
 
 
−
==Overview==
 
−
<br>
 
−
[[Image:Legal-book.JPG|thumb|300px|right|OWASP Contract Annex Book]]
 
−
The OWASP Legal project provides materials related to the legal aspects of secure software, including contracting, liability, and compliance. This project should not be considered legal advice, and we strongly recommend that you find competent counsel to assist with your contract negotiations. Project materials have been place in the public domain to facilitate use in private contracts.
 
−
 
 
−
 
 
−
The OWASP Legal project's Secure Software Development Contract Annex (Contract Annex) is guidance that you should take with you when you talk to a qualified attorney to negotiate and capture important contractual terms and conditions related to the security of the software to be developed or delivered. It is a starting point for your agreement. You may not like all the activities, or may want to propose more. You may want to assign responsibilities differently. It is not intended to exactly capture the needs of all software Clients and Developers. The Contract Annex is intended to provide a framework for discussing the key topics that are important to ensuring that software ends up secure. After you have a security discussion and reach agreement, you should tailor this agreement to match.
 
  
 +
The OWASP Legal Project's '''Secure Software Development Contract Annex (Contract Annex)''' helps software developers and their clients negotiate and capture important contractual terms and conditions related to the security of the software to be developed or delivered. Most contracts are silent on these issues, and the parties frequently have dramatically different views on what has actually been agreed to. Clearly articulating these terms is the best way to ensure that both parties can make informed decisions about how to proceed. There are currently versions in English.<br><br>
  
 
There are many benefits to working through the OWASP Secure Software Development Contract Annex. The principal one is that it will make expectations clear between the parties involved. In some cases it will help to prevent lawsuits when difficult security problems surface in the software. Also, these are the same activities that are required by many legal and regulatory compliance reasons.
 
There are many benefits to working through the OWASP Secure Software Development Contract Annex. The principal one is that it will make expectations clear between the parties involved. In some cases it will help to prevent lawsuits when difficult security problems surface in the software. Also, these are the same activities that are required by many legal and regulatory compliance reasons.
  
  
−
The goal of the Contract Annex is simply to ensure, at each stage of the life cycle, that appropriate attention has been paid to security. An additional benefit is that this documentation can be collected together to form a "certification package" that essentially lays out the argument for why this software should be trusted to do what it claims it does.
+
The goal of the Contract Annex is simply to ensure, at each stage of the life cycle, that appropriate attention has been paid to security. An additional benefit is that this documentation can be collected together to form a "certification package" that essentially lays out the argument for why this software should be trusted to do what it claims it does.<br><br>
  
 +
'''What's new?'''
  
−
* [[OWASP Secure Software Contract Annex]]
+
[http://www.owasp.org/index.php/ASVS OWASP Application Security Verification Standard (ASVS)] has been integrated into the OWASP Secure Software Development Contract Annex
−
* [[Secure software contracting hypothetical case study]]
 
  
  
−
You can download the Microsoft Word version [[Image:OWASP Secure Software Contract Annex.doc]] and modify it to suit your needs. Please consider contributing back any enhancements you make.
 
  
  
−
Read about our plans in the [[OWASP Legal Project Roadmap]]. More details about the Contract Annex are below.
 
  
 +
|
  
−
==Announcements==
+
Proj_Documentation=  
 +
<br>
 +
{{OWASP Book|4037498}}
 +
<br>
 +
<br>'''More About the Contract Annex'''
 
<br>  
 
<br>  
−
* 01/22/2009 - OWASP Contract Annex updated to support the use of [http://www.owasp.org/index.php/ASVS OWASP ASVS].
+
[[Image:Legal-handout.JPG|thumb|90px|left|Handout]]
−
* 01/01/2009 - OWASP Contract Annex language integrated into the [http://www.sans.org/appseccontract/ SANS Application Security Procurement Language].
+
* One Page Datasheet ([http://www.owasp.org/images/a/aa/Legal_One_Page_Handout.doc Word], [http://www.owasp.org/index.php/Image:Legal_One_Page_Handout.pdf PDF])
−
* 11/30/2006 - OWASP Contract Annex [http://www.owasp.org/index.php/Image:OWASP_Secure_Software_Contract_Annex.doc Release version published].
 
  
  
−
==OWASP Contract Annex Release Downloads==
 
−
<br>
 
−
[[Image:Legal-book.JPG|thumb|90px|left|Release]]
 
−
Download free:
 
  
−
'''OWASP Contract Annex - Release (This is the current official release version)'''
+
  
−
* [[OWASP Secure Software Contract Annex]]
+
 
   
 
   
  
Line 53: Line 41:
  
 
   
 
   
−
 
 
 
   
 
   
 
   
 
   
 +
'''Related projects'''
 +
 +
[[Image:Owasp-projects-page.jpg|thumb|110px|left|Projects Page]]
 +
* [http://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project OWASP Top Ten]
 +
* [http://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project OWASP ASVS Project]
 +
 +
 +
 
   
 
   
 
   
 
   
  
−
== OWASP Contract Annex Presentation Downloads ==
+
<br>
 +
====Contract Annex====
 +
'''OWASP Contract Annex - Release (This is the current official release version)'''
 
<br>  
 
<br>  
−
[[Image:Legal-handout.JPG|thumb|90px|left|Handout]]
+
[[Image:Legal-book.JPG|thumb|90px|left|Release]]
−
Download free:  
+
Download free:
  
−
'''About OWASP Contract Annex:'''
+
'''OWASP Contract Annex - Release'''
  
−
* One Page Conference Handout ([http://www.owasp.org/images/a/aa/Legal_One_Page_Handout.doc Word], [http://www.owasp.org/index.php/Image:Legal_One_Page_Handout.pdf PDF])
+
* [[Image:OWASP Secure Software Contract Annex.doc]]
 +
<br><br><br><br><br>
 +
 
 +
 
 +
 
 +
 
 +
   
 +
 
 +
 
 
   
 
   
  
−
   
+
  |
 +
 
 +
Proj_Mail= '''Project News'''
 +
 
 +
* 01/22/2009 - OWASP Contract Annex updated to support the use of [http://www.owasp.org/index.php/ASVS OWASP ASVS].
 +
* 01/01/2009 - OWASP Contract Annex language integrated into the [http://www.sans.org/appseccontract/ SANS Application Security Procurement Language].
 +
* 11/30/2006 - OWASP Contract Annex [http://www.owasp.org/index.php/Image:OWASP_Secure_Software_Contract_Annex.doc Release version published].
 +
 
 +
<br>'''Mailing List'''<br>[https://lists.owasp.org/mailman/listinfo/owasp-legal Subscribe here]<br>[mailto:owasp-legal(at)lists.owasp.org Use here]
 +
|
 +
 
 +
Proj_Related= [[Top Ten|OWASP Top Ten]] |
 +
 
 +
Proj_Contributors= '''Project Leader'''<br>[[:User:Jeff Williams|Jeff Williams]]<br><br>'''Project Contributors'''<br>[http://www.owasp.org/index.php/User:Mike.boberski Mike Boberski]
 +
 
 +
 
 +
 
 +
'''The OWASP Legal project is sponsored by:'''
 +
 
 +
[[Image:Aspect logo.jpg]]
  
−
 
−
 
 
−
 
−
 
−
 
−
 
  
−
==Feedback and Participation==
+
'''Users and Adopters'''
−
<br>
 
−
We hope you find the OWASP Secure Software Contract Annex useful. Please contribute back to the project by sending your comments, questions, and suggestions to [email protected]. To join the OWASP Legal mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-legal subscription page.]
 
  
−
==Project Contributors==
+
Coming soon! Please let us know how your organization is using the OWASP Contract Annex. Include your name, organization's name, and brief description of how you use the standard. The project lead can be reached at [[:User:Jeff Williams|Jeff Williams]] Thanks for supporting OWASP!
−
<br>
+
<br>
−
The Legal project lead is Jeff Williams of Aspect Security. He can be reached at jeff.williams 'at' owasp.org.
+
<br>
  
−
==Project Sponsors==
 
−
<br>
 
−
The OWASP Legal project is sponsored by
 
−
[http://www.aspectsecurity.com https://www.owasp.org/images/d/d1/Aspect_logo.gif]
 
  
−
==Articles - More About The Contract Annex and Using It==
+
}}
 +
''This project licensed under the Licensed under [http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution ShareAlike 3.0].''
 +
<br>
  
−
[[Category:OWASP Document]]
+
= Articles Below - More About the Contract Annex and Using It =
−
[[Category:Planning]]
 
−
[[Category:Requirements]]
 
−
[[Category:OWASP Project]]
 
−
[[Category:OWASP Download]]
 
−
[[Category:OWASP Release Quality Document]]
 

Revision as of 00:29, 16 March 2009

About

Legal-bannerbug.JPG

How can the legal project help me?

The OWASP Legal Project's Secure Software Development Contract Annex (Contract Annex) helps software developers and their clients negotiate and capture important contractual terms and conditions related to the security of the software to be developed or delivered. Most contracts are silent on these issues, and the parties frequently have dramatically different views on what has actually been agreed to. Clearly articulating these terms is the best way to ensure that both parties can make informed decisions about how to proceed. There are currently versions in English.

There are many benefits to working through the OWASP Secure Software Development Contract Annex. The principal one is that it will make expectations clear between the parties involved. In some cases it will help to prevent lawsuits when difficult security problems surface in the software. Also, these are the same activities that are required by many legal and regulatory compliance reasons.


The goal of the Contract Annex is simply to ensure, at each stage of the life cycle, that appropriate attention has been paid to security. An additional benefit is that this documentation can be collected together to form a "certification package" that essentially lays out the argument for why this software should be trusted to do what it claims it does.

What's new?

OWASP Application Security Verification Standard (ASVS) has been integrated into the OWASP Secure Software Development Contract Annex

FAQ


OWASP Books logo.png This project has produced a book that can be downloaded or purchased.
Feel free to browse the full catalog of available OWASP books.



More About the Contract Annex

Handout







Related projects

Projects Page





Contract Annex

OWASP Contract Annex - Release (This is the current official release version)

Release

Download free:

OWASP Contract Annex - Release






News

Project News


Mailing List
Subscribe here
Use here

Contributors/Users

Project Leader
Jeff Williams

Project Contributors
Mike Boberski


The OWASP Legal project is sponsored by:

Aspect logo.jpg


Users and Adopters

Coming soon! Please let us know how your organization is using the OWASP Contract Annex. Include your name, organization's name, and brief description of how you use the standard. The project lead can be reached at Jeff Williams Thanks for supporting OWASP!


This project licensed under the Licensed under Creative Commons Attribution ShareAlike 3.0.

Articles Below - More About the Contract Annex and Using It

Retrieved from "https://wiki.owasp.org/index.php?title=Category:OWASP_Legal_Project&oldid=56740"