From the course: CSSLP Cert Prep: 8 Supply Chain and Software Acquisition

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Contractual requirements

Contractual requirements

From the course: CSSLP Cert Prep: 8 Supply Chain and Software Acquisition

Start my 1-month free trial

Contractual requirements

- [Instructor] Software supply chain security depends heavily on written agreements between all related parties. Contractual requirements in those agreements include things like IP ownership, code escrow, EULAs and SLAs. Intellectual property or IP ownership is standard fair for these agreements especially in outsourcing relationships. If you're hiring a third party to write code for you, these contracts are an important part of protecting the resulting IP. The world intellectual property organization is one resource you can rely on here. And their advice is that you make sure to include contract language, about who owns a resulting IP, and what the consequences are for disclosing that IP. You can ask all involved parties to sign non-disclosure agreements or NDAs. Which include legal consequences for divulging any IP to unauthorized parties. That said IP laws often vary from one country to the next. If you don't have…

Contents