Questions tagged [vendor-selection]
The vendor-selection tag has no usage guidance.
19
questions
0
votes
0
answers
28
views
What strategies can I use to negotiate security terms in vendor contracts for vendors in high geopolitical risk countries?
Please assume the following in responding:
Data being passed to vendor is subject to data protection laws in the USA such as GLBA
Data itself resides within the United States
Switching vendors will ...
- 1,766
18
votes
4
answers
2k
views
Criteria for Evaluating Static Analysis Tools
As with any tools purchase part of the outcome is in how good the evaluation criteria are, so it is important to understand the criteria people might use when assessing Security static analysis tools.
...
AviD♦
- 72.8k
-1
votes
4
answers
206
views
Vendor Security Review. When is it overkill?
Looking for everyone's opinion here. One of my buddies was doing a vendor security review for a company that sells different types of software. The software allows you to create 3D models for home and ...
- 306
1
vote
1
answer
156
views
What are the (two?) definitions of SOC?
On one hand "Security Operations Centre", but SOC is seemingly used in the reporting and certification domain, where does this come from? Is there another (or more) definitions of SOC in ...
- 72.5k
8
votes
4
answers
320
views
Evaluating security controls of smaller vendors
In the IT Security team where I work, we currently use the Standarized Information Gathering or SIG tool to evaluate IT security posture of prospective 3rd party vendors. What I like about the SIG is ...
CommunityBot
- 1
83
votes
6
answers
7k
views
What security features are important when buying a smartphone?
I'm looking at replacing my very old android smartphone. Information security is increasingly a feature that I'm looking for. As well as being slow, I don't think I can upgrade my current handset to ...
CommunityBot
- 1
47
votes
2
answers
16k
views
Criteria for Selecting an HSM
A very sensitive application has to protect several different forms of data, such as passwords, credit cards, and secret documents - and encryption keys, of course.
As an alternative to developing a ...
- 2,128
-2
votes
1
answer
91
views
Network product (software and hardware) vendors independent from NSA in 2018 [closed]
Which vendors of network products like firewalls, routers, switches, VPN softwares and similar are likely to be free from backdoors, already built in surveillance capabilities, secretly broken ...
- 7,788
5
votes
5
answers
1k
views
Outsourcing software development and its effect on security
Some companies build their own software. Others outsource software development by hiring contractors or other companies to build software they need.
When we need to build new custom software, is ...
0
votes
1
answer
193
views
How should potential (unverified) security vulnerabilities be best reported?
As an IT auditor, part of my job duties includes vendor risk assessment / conducting security due diligence.
Based on documentation obtained from the vendor, (SOC 2 report, SIG survey ) , I and ...
CommunityBot
- 1
5
votes
3
answers
29k
views
What advantages and disadvantages do Palo Alto firewalls have, compared to others in the market
I am about to start an evaluation process for firewalls. I have experience with Checkpoint and Juniper, but I don't have any information on Palo Alto networks, other than their marketing stuff.
So I ...
- 1
1
vote
0
answers
147
views
what security features a good Email Service Provider (for marketing) should have?
To choose the right Email Service Provider (ESP) for e-mail marketing processes, what are security requirements and checklists that we should pay attention to and ask for from vendors?
In other ...
- 905
5
votes
4
answers
8k
views
Is it better to choose a single vendor or multiple vendors
A discussion came up at work recently and a debate ensued regarding choosing a vendor. Several people were of the opinion that it is smarter and easier to choose a single security vendor for all our ...
1
vote
1
answer
299
views
What manufacturers create OATH HOTP cards now that InCard Technologies is no longer in business?
I purchased the following OAUTH HOTP card from Verisign. I'm intrigued by the security possibilities that this form factor provides and what customizations to the circuit logic are possible.
On the ...
CommunityBot
- 1
4
votes
3
answers
395
views
Evaluating Cloud Provider Security
I am trying to make a judgement call on a cloud provider's security. This is what I know :
Provider A - PRGMR.COM (not very well known but competent and reliable)
Is very transparent - seeks ...
CommunityBot
- 1
5
votes
3
answers
373
views
What security factors should I take into consideration when selecting a bank?
I've gotten fed up with my bank and have made the decision to move all of my banking elsewhere. This is a rare occurrence for me and, I suspect, for other people as well. It represents an opportunity ...
- 2,966
1
vote
1
answer
581
views
What questions should I ask a prospective vendor that handles billing and fulfillment?
My company is currently looking to integrate a third-party vendor into our billing and fulfillment process. The vendor will be assuming responsibility for processing orders in our merchant account and ...
- 325
4
votes
1
answer
189
views
What security features and qualifications should we look for in an online backup provider?
What security features and qualifications should we look for in an online backup provider for an Internet-exposed web server storing sensitive data?
In the backups themselves - encryption type, ...
AviD♦
- 72.8k
6
votes
2
answers
583
views
Outsourcing security evaluation
Does anyone have any experience with outsourcing security code review via freelance sites (like Rent-a-coder, Elance, Guru, Getafreelancer, etc.)? Is this effective? What are the best practices? ...
- 985