Abstract :
This article explores some useful concepts that help integrate security more firmly into the software-procurement process. For those involved with software or software procurement in an organization, it helps to start by asking potential vendors some simple questions about their software-development processes, education and training, and accountability.