Overview

Some services require the use of software installed on the organization’s computer systems.

Why are they asking this?

The software needs to be listed so that the organization can know what is to be installed and what process they have to do before the software is introduced to their network. They may require security evaluation of the software before the software is used.

What do they expect?

A list of any software that is supplied to their organization or required to be purchased before the service can be provided. If the software is developed internally to your organization, information on development practices and any security evaluations may be required.