A customer of ours asked for some basic principles to follow when procuring new tailor-made software from various vendors. The discussion boiled down to these three bullets that hopefully can bring value to anyone in the same position as our customer:

• Vendor interviews

• Maintainability as a design goal

• Penetration test payment

This is by no means a complete guide to secure software procurement but meant to be seen as an inspiration for starting out.