Requirement
"The organization shall direct, monitor and review the activities related to outsourced system development."[1]
Explanation
Outsourcing software development can present additional security risks because the organization does not have direct control over the partner/service provider. Ensure that the provider is following secure software development practices. Have a robust contract with the provider and monitor and review their work to ensure it meets your organization's security requirements.
