This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Talk:Industry:Project Review/NIST SP 800-37r1 FPD Appendix I

From OWASP
Revision as of 23:22, 19 December 2009 by Walter Houser (talk | contribs) (APPENDIX I SECURITY CONTROLS IN EXTERNAL ENVIRONMENTS)

Jump to: navigation, search

PARTNERSHIPS, OUTSOURCING ARRANGEMENTS, SUPPLY CHAIN EXCHANGES


APPENDIX I SECURITY CONTROLS IN EXTERNAL ENVIRONMENTS

[https://buildsecurityin.us-cert.gov/swa/downloads/SwA_in_Acquisition_102208.pdf Software Assurance in Acquisition: Mitigating Risks to the Enterprise] "... provides information on how to incorporate SwA considerations in key decisions and how to exercise due diligence throughout the acquisition process relative to potential risk exposures that could be introduced by the supply chain." --Walter Houser 23:22, 19 December 2009 (UTC)