5 Steps to Managing Third Party Application Security Risk

Veracode • August 17, 2009

Application vulnerabilities are real and hackers are targeting industries that offer the best avenues for illicit monetary gains. At the same time, economic, competitive and time-to-market pressures are driving enterprises to use third-party commercial off-the-shelf (COTS), open source and outsourced code as part of their application development process - and therefore exposing these enterprises to unacceptable level of unbounded corporate risk.

This whitepaper outlines a five step process that enterprises can apply to their third-party application portfolio to gain visibility into their security state and make informed purchase, integration, deployment and maintenance decisions. These key steps provide guidance that enterprises can swiftly implement to simply and cost-effectively meet regulatory requirements, establish a third-party governance framework and protect their critical assets.

The whitepaper also offers insights on how to:

Mitigate risk from commercial software, outsourced development, and contracted software for both internal and web-facing applications
Create best practices for securing third party code
Define security standards with software vendors - including FREE sample outsourcing contracting language