---
id: 8269
title: "Outsourcing application development – what is missing?"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/vulnerability-management/outsourcing-application-development-what-is-missing/"
published_at: "2013-10-03T00:00:00Z"
tags: ["security-training", "application-security", "secure-development", "sdlc", "outsourcing", "contracts"]
phying_url: "https://phying.com/item/8269"
lang: en
---

# Outsourcing application development – what is missing?

## Summary

Outsourcing guides rarely address security: require secure coding training, put security reviews in contracts, and demand a penetration test plus code review with mitigation before release.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2013-10-03T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/vulnerability-management/outsourcing-application-development-what-is-missing/
- **Phying News:** https://phying.com/item/8269