Source code escrow

Term
Source code escrow
Exam
CISA
Definition

Deposit of an application's source code with a third party, released to the customer if the vendor fails.

Explained

Escrow deposits an application's source code with an independent agent, released if the vendor fails. It only protects the organization if deposits are complete, current and verified to build.

In practice

A startup's code is deposited with an escrow agent and released if the startup goes out of business.

Often confused with
Software license
Exam angle

Verify deposits are complete and current.

Related

Right to audit ยท Service level agreement (SLA)

More from Glossary