Practical Guide for IT Outsourcing
a HandiGuide^®

Version History

Version 3.0

• Updated Risk Assessment – Business and IT Impact Questionnaire
  • Updated for COBIT compliance
  • Updated for PCI-DSS compliance
  • Updated for US state level compliance (New York, Massachusetts, and California)\
  • Update for ISO security requirements
• Updated Outsourcing Policy
• Added Outsource Security Policy Compliance Agreement

Version 2.3

• Updated to use MS WORD CSS style sheet
• Update Business and IT Impact Questionnaire –in addition to being included as part of the main document it is included as a separate PDF and Word document.

Version 2.2

• Updated text to conform to Sarbanes-Oxley
• Updated contract terms to include staffing approval requirements
• Added section of criteria for selecting vendor candidates
• Updated ISO Security Audit Checklist to meet ISO 27001 and ISO 27002
• Updated graphics

Version 2.1

• Updated text to conform to Sarbanes-Oxley
• Added updated Business and IT Impact Questionnaire
• Added ISO 17799 Security Audit Checklist
• Added Outsource Security Policy Compliance Agreement
• Added HIPAA Audit Program Guide
• Updated selected graphics
• Corrected minor errata