When purchasing packaged software, security issues should be considered. This may mean that you might want to make use of independently evaluated and certified products. If this is not possible then consideration could be given to ensuring that products purchased have a documented, successful track record.

It is important to note that controls introduced at the design stage are significantly cheaper to implement and maintain than those included during or after implementation. Some research suggests that it may be 10 times cheaper!