Acquisition process

Question 1

Acquisition process

Answer 1

Acquisition process = the steps an organization follows to get new systems, software, or services in a secure way.
• It’s not just about buying — it means making sure what you buy is safe, trusted, and meets security requirements.
• Includes things like: checking vendors, reviewing contracts, verifying security controls, and making sure the product won’t introduce new risks.

✅ Example:
If a company wants new cloud storage, the acquisition process would cover:
1. Picking a vendor.
2. Checking if the vendor has good security (encryption, compliance, etc.).
3. Making sure contracts include security responsibilities.
4. Approving and deploying it safely.

Question 2

Is accusations _due diligence

Answer 2

Acquisition process = due diligence + approval + secure deployment.