Back to all 93 controls
Annex A 8.30
Technological
A.8.30 Outsourced development
Govern outsourced development.
What good looks like
Security requirements in supplier contracts, code reviewed before acceptance.
Evidence an auditor will ask for
Supplier security requirements, acceptance test records.
Document template for this control
The Secure Development Policy template gives you auditor-ready wording that fulfils Annex A 8.30. Preview the full document before you download the editable version.