Security when outsourcing?
I am just venturing into the world of outsourcing. One of my big questions is this:
You outsource an addition/modification (or even entire site) to an existing website you have - How do you handle the security issues if you cannot integrate the change in code by yourself? Is it sufficient to just reset passwords after they complete the changes? I guess my question is how do you keep peace of mind that your property will stay secure and does not have any backdoors or security holes left in it?
Are references alone sufficient to establish someone as trustworthy? Are there better ways?
You outsource an addition/modification (or even entire site) to an existing website you have - How do you handle the security issues if you cannot integrate the change in code by yourself? Is it sufficient to just reset passwords after they complete the changes? I guess my question is how do you keep peace of mind that your property will stay secure and does not have any backdoors or security holes left in it?
Are references alone sufficient to establish someone as trustworthy? Are there better ways?