Common use of Supplier’s Cyber Security Program Clause in Contracts

Supplier’s Cyber Security Program. should be fully integrated into the existing Software Development Life Cycle (“SDLC”), engineering design and change process, configuration management, equipment life cycle, and procurement processes. It is critical that there be full traceability with documented evidence that the component or system was developed, installed, tested, and placed into operation in accordance with cyber security and other requirements that were established as part of the overall secure development life cycle.