Version Control + Documentation + Vendor Selection + Vendor Agreements

Version control

ensures that developers and users have access to the latest version of software and that changes are carefully managed throughout the release process

Documentation

identifies the current configuration of systems. It identifies who is responsible for the system and its purpose and lists all changes applied to the baseline

Vendor Selection

• Due diligence

• Conflict of interest

Master service agreements (MSAs)

provide an umbrella contract for the work that a vendor does with an organization over an extended period of time. Typically includes detailed security and privacy requirements. Each time the organization enters into a new project with the vendor, they may then create a work order (WO) or a statement of work (SOW) that contains project-specific details and references to the ___

Service level agreements (SLAs)

are written controls that specify the conditions of service that will be provided by the vendor and the remedies available to the customer if the vendor fails to meet the ___. ____ commonly cover issues such as system availability, data durability, and response time

A memorandum of understanding (MOU)

is a letter written to document aspects of the relationship. ___ are an informal mechanism that allows the parties to document their relationship to avoid future misunderstandings. ___ are commonly used in cases where an internal service provider is offering a service to a customer that is in a different business unit of the same company

A memorandum of agreement (MOA)

is a formal document that outlines the terms and details of an agreement between parties, establishing a mutual understanding of the roles and responsibilities in fulfilling specific objectives

Business partners agreements (BPAs)

exist when two organizations agree to do business with each other in a partnership