Annex A.14 - Systems Acquisition, Development, and Maintenance

System acquisition, development, and maintenance: This control requires organisations to ensure that information security is considered throughout the entire lifecycle of information systems.