Last Updated: May 29, 2025
OVERVIEW
The System Acquisition and Development Policy establishes the principles and requirements for acquiring and developing information systems that meet HomeTree Digital’s business needs while ensuring security, compliance, and performance. All new systems, whether internally developed or externally procured, must have clearly defined technical and security requirements aligned with industry standards such as ISO 27001, NIST, and OWASP. Systems undergo thorough documentation, business impact analysis, secure coding, and rigorous testing—including vulnerability assessments and penetration tests—prior to deployment. Development, testing, and production environments must be segregated, and all software components kept up to date with necessary patches.
The policy also governs ongoing maintenance and secure decommissioning of systems, ensuring data protection and operational continuity throughout their lifecycle. It applies to all HomeTree Digital employees, contractors, and third parties involved in system-related activities.
To learn more or request a full copy of the policy, please contact us.