Guest post Created: Jan 12, 2016 Last commented: Jan 12, 2016

Interpretation of A.14.2 : Security in development and support processes

Some BPO (call center) companies exclude all controls of A.14.2 thinking that this set of controls is only for software development organizations. I am of the opinion that development is applicable to design of services and solutions in non-software service organizations too. Which view is correct?

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

Sub-section A.14.2 (Security in development and support processes) applies to any kind of development: software or other type. However, the controls in this sub-section suggest that this development must be related to information systems. So you might have some kind of a development of new products in your systems which do not require any software development.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community