Escrow Basics
For most Escrow solutions, what is NCC Group storing in our vaults?
Software Source Code
What is the name of the 3-party agreement that includes bespoke source code?
Single Licensee Agreement - SL
Which agreement is a 3-party agreement is for bespoke software and all parties must sign the contract?
3 Party Agreement
What do the letters 'ELV' mean?
Entry Level Verification
What is the lowest verification that a customer can purchase?
What is a MFR or Media File Review
What is a good definition of Software Escrow or Software Resilience?
A legal and technical contract that is in place to provide business continuity should a software provider fail.
What solution is best for a software vendor that has many different types of software offerings and want to have many of them set up in escrow?
Multi Licensee Agreement - ML
What agreement is it when a software vendor wants to have the contract in their favor and the beneficiaries have limited benefits and are not allowed to do verification?
2-Party
For an ELV, who builds the code, complies it, and then makes some basic changes to it?
A __________ is when NCC independently rebuilds the program and checks to see if the executable files we have match the ones is the customers environment.
What is Binary Comparison Verification or BCV
For an 'On Premises' solution, where is the software application set up and running?
In the business' data center or somewhere in their business running on their servers.
What are the 2 types of beneficiaries with an ML?
Standard and Registered
What is the main Verification needed for all Eaas agreements?
What is Source Code Verification
Which verification is it when NCC Group will build the code, compile it, and make changes in an NCC Group environment?
Independent Build Verification
What is the name of the verification where NCC watches the rebuild of the application, takes notes, and checks to see if the application is functional in the ISV environment?
What is Entry Level Verification
What are 2 additional names for a software vendor?
Licensor, ISV, Depositor, Software Owner
In a multi-tenet Cloud what is the solution?
What is Replicate
Situation: The client has their own Cloud that they pay for. The software developer has RLC to get into the cloud to build and maintain the application. What you suggest as the ES Agreement and Verifications to the client?
What is Control with Source Code Verification and Architecture Verification
What NCC Group job role will work with the software vendor to do the verification activity?
Technical Consultant
What does SAST stand for and what is the function?
What is Static Application Security Test and checks for security gaps within the source code.
What are 3 additional names for businesses that use software?
Licensee, Beneficiary, Software User
The customer has a single tenet cloud they are paying for. What is the best EaaS solution for them?
What is Control
What is another term for Source Code Verification?
What is ELV or Entry Level Verification
What are the 4 stages of verification?
1. Watch the build and take notes.
2. Complied by Software Vendor or NCC into a working application.
3. Testing the application for usability.
4. Package and submit reports to both parties.
What are the 4 Stages of Verification?
What is:
1. Watch the build and take notes.
2. Complied by Software Vendor or NCC into a working application.
3. Testing the application for usability.
4. Package and submit reports to both parties.