System Acquisition and Development Control Set

This System Acquisition and Development controls set / policy helps to ensure that information security is designed and implemented with the development or acquisition of new systems.

The control set / policy has been created by 6clicks as a baseline for your consideration when establishing your cyber and information security program.

Control sets / policies include a set of controls, in this case mapped to the requirements of ISO/IEC 27001, along with an associated set of policies, which we call statements.

Statements are the individual responsibilities that you assign to people -- or groups -- within your organisation and can be associated with reminders/checks for ongoing performance management.

This System Acquisition and Development controls set / policy includes the following topics;

• Requirements
• Development environments
• Test data
• Version control
• Code access
• Secure code
• Cryptography
• Security testing