--- title: System Acquisition, Development & Maintenance description: This page outlines what system acquisition, development and maintenance in relation to information security. --- [![mango_ecoonline](https://www.mangolive.com/hubfs/Mango%20Theme%202024/mango_ecoonline.svg "mango_ecoonline")](https://www.mangolive.com/?hsLang=en) [![Client Login](https://no-cache.hubspot.com/cta/default/308986/50884387-f40d-4aa4-83e1-6f160fd3eedc.png)](https://cta-redirect.hubspot.com/cta/redirect/308986/50884387-f40d-4aa4-83e1-6f160fd3eedc) QHSE Compliance Software Solutions Mango can be used to control and maintain all aspects of an organisation's QHSE compliance requirements. So whatever your needs - be they Health & Safety, Quality, Environmental Management, Food Safety - or all four - Mango is the answer. QHSE Compliance Software Mango can be used to control and maintain all aspects of an organisation's QHSE compliance requirements. So whatever your needs - be they Health & Safety, Quality, Environmental Management, Food Safety - or all four - Mango is the answer. QHSE Learning Centre Broaden your QHSE knowledge with resources for all skill levels. Whether you need the latest advanced tactics, a refresher on the basics, or to start from scratch, this is your home for QHSE knowledge. QHSE Clients Watch and listen to some Mango clients. They are just like you. Wrestling with QHSE compliance. They tell stories of before and after using Mango. They tell it like it is. # System Acquisition, Dev and Maintenance [Learn QHSE](https://www.mangolive.com/learn-qhse?hsLang=en) / [Information Security](https://www.mangolive.com/learn-qhse?hsLang=en#information-security) / System Acquisition, Development & Maintenance ## **What is system acquisition, development and maintenance? ** When creating systems for your information security management system (ISMS) you need to to focus on the life-cycle of your entire information system.  Your ISMS doesn’t just focus on your IT and your networks, it focuses across your whole systems. It is important that this strategy is in place from the beginning. You need to take a broad approach across your systems. That is from acquisition, through development and then into maintenance. So you need to look across all your systems and check that information security is built into every step. ## Mapping Your Life-Cycle Map your entire life-cycle during the development of your systems, so you know what your systems are.  Then check all the information security activities for each of the steps and upgrade or enhance what is in place.  For example check through marketing, development, sales, implementation, support and financial systems for information security vulnerabilities.   Some things you may want to check in the development processes include: - Secure development policy - System change control procedures - Technical review of applications after operating platform changes - Restrictions on changes to software packages - Secure system engineering principles - Secure development environment - Outsourced development - System security testing - System acceptance testing #### Learn More: - [ISO 27001 Information Security Management Standard - Clause A.14 System acquisition, development and maintenance](https://www.mangolive.com/blog-mango/iso-27001-clause-a14-system-acquisition-development-and-maintenance?hsLang=en) - [What are the information Security Principles? ](https://www.mangolive.com/information-security-principles?hsLang=en) - [What is continuous Improvement?](https://www.mangolive.com/what-is-continuous-improvement?hsLang=en) - [What are information security manuals?](https://www.mangolive.com/how-do-you-develop-an-information-security-management-manual?hsLang=en) - [What is business Continuity? ](https://www.mangolive.com/information-security-business-continuity?hsLang=en)   [![mango_ecoonline](https://www.mangolive.com/hubfs/Mango%20Theme%202024/mango_ecoonline.svg "mango_ecoonline")](https://www.mangolive.com/?hsLang=en) 2024 Copyright. All rights reserved. [Privacy policy](https://www.ecoonline.com/privacy-notice-ecoonline). - [**](https://www.facebook.com/Mango.Ltd) - [**](https://x.com/MangoLimited) - [**](http://www.linkedin.com/company/mango-limited?trk=fc_badge) - [**](https://www.youtube.com/user/mangosoftware)