How do vendor security reviews influence technology purchases?

ArchitectureStrategy

None, we don't perform vendor security reviews7%

Very little, our vendor reviews are mostly a box-checking exercises37%

Sometimes vendor security reviews delay purchases but they don't change outcomes29%

Vendor security reviews break ties between equal vendors15%

Vendor reviews make security a key buying criteria11%

291 PARTICIPANTS
2.2k viewscircle icon1 Comment
Sort by:
Director - Architecture and Digital Transformation in Software4 years ago

We have an App Sec and Architecture review as an integral part of Vendor evaluation. This allows us to categorize vendor based on security score and also keep technical debt very low

Lightbulb on1

Content you might like

Track and Trace in a regulated industry (Pharma).   Our current solution (SAP ATTP) is reaching end of life in 2027.   Interested in hearing from peers and those who have decided to upgrade to the SAP RISE ATTP/4HANA or have decided/using a viable alternative.

What have you found most beneficial in your efforts to ensure that the data and analytics function creates value for the organization?

Ownership of key technologies8%

Ownership of key domain areas57%

Visibility into key domain areas 26%

Engagement and collaboration with the C-suite2%

Engagement and collaboration with VPs and managers6%

Something else

View Results

Which video chat app do you feel is most secure?

Zoom19%

Signal17%

WhatsApp19%

Wre1%

FaceTime5%

Jitsi1%

Microsoft Teams27%

Cisco Webex4%

Google Meet3%

View Results

How can I establish consumption-based improvements or reports for on-premise services like k8s, databases, elasticsearch as well as cloud services like cloudflare or azure? 
Background:
I would like to provide consuption reports to our internal customers which are mostly developments teams in order to make awareness of there on-premise service usage.

How are you addressing technical debt risk resulting from AI coding tools? Have you established specific processes to manage vulnerabilities in AI-generated code, and are you collaborating with software engineering or other teams using these tools?

Read More Comments