Outsourcing Code, Keeping Control – ISO/IEC 27001 A.8.30

https://is1-ssl.mzstatic.com/image/thumb/Podcasts116/v4/2f/d0/65/2fd065cb-5a07-ed13-2bef-5f20237835d8/mza_16436592847458646362.jpg/600x600bb.jpg

The ITSM Practice: Elevating ITSM and IT Security Knowledge

Luigi Ferri

121 episodes

1 week ago

Join Luigi Ferri, an experienced ITSM & IT Security Professional, in 'The ITSM Practice.' Explore IT Service Management and IT Security, uncovering innovations and best practices with insights from leading organizations like Volkswagen Financial Services, Vodafone, and more. Each episode offers practical guides and expert discussions for learning and growth. Ideal for all ITSM and IT Security Professionals! Stay Connected: LinkedIn: https://www.linkedin.com/in/theitsmpractice/ Youtube: https://www.youtube.com/@theitsmpractice Website: http://www.theitsmpractice.com

Technology

RSS

All content for The ITSM Practice: Elevating ITSM and IT Security Knowledge is the property of Luigi Ferri and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Technology

https://d3t3ozftmdmh3i.cloudfront.net/staging/podcast_uploaded_nologo/39791737/39791737-1703369682997-6c8aee26bd3b2.jpg

Outsourcing Code, Keeping Control – ISO/IEC 27001 A.8.30

The ITSM Practice: Elevating ITSM and IT Security Knowledge

9 minutes 12 seconds

4 months ago

Outsourcing Code, Keeping Control – ISO/IEC 27001 A.8.30

Outsourced development is growing, but ISO 27001 Annex A 8.30 ensures you don’t outsource control. In this episode, we explain how to secure external software development, from vendor audits to contract clauses and compliance risks. Learn practical steps to protect your business.

In this episode, we answer to:

How can ISO 27001 Annex A 8.30 secure outsourced development?

What security questions should you ask every software vendor?

How do you turn contracts into enforceable cybersecurity controls?

Resources Mentioned in this Episode:

HighTable, article "ISO 27001 Annex A 8.30 Outsourced Development", link https://hightable.io/iso27001-annex-a-8-30-outsourced-development/

ISMS.online website, article "ISO 27001:2022 Annex A 8.30 – Outsourced Development", link https://www.isms.online/iso-27001/annex-a/8-30-outsourced-development-2022/

ISMS.online website, article "ISO 27002:2022 – Control 8.30 – Outsourced Development", link https://www.isms.online/iso-27002/control-8-30-outsourced-development/

GRC Mana website, article "ISO 27001 Annex A 8.30: A Step-by-Step Guide", link https://www.grcmana.io/blog/iso-27001-annex-a-8-30-outsourced-development

Advisera website, article "Big guide to ISO 27001 clauses — How is this standard structured?", link https://advisera.com/iso27001/control-8-30-outsourced-development/

Connect with me on:

LinkedIn: https://www.linkedin.com/in/theitsmpractice/

Website: http://www.theitsmpractice.com

And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits:

Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya