Chester, United Kingdom (PressExposure) November 17, 2009 -- Depending on the nature of the Deposit Materials and other factors, it may be able to expand the verification as mutually agreed to include other steps or procedures or to conduct specific checks for encryption, passwords or other security issues. Verification of Deposit Materials is not included unless agreed to in writing and would increase the fees for an escrow and/or result in additional verification services on a time and materials basis or fixed fee per service basis.
NCC Group offers the following levels of Verification Testing:
Full Verification service provides assurance that the source code deposited under a Software Escrow Solution is correct and complete by ensuring that the deposit can be built into the working system. We observe the complete build of the application at the supplier's site and document every detail of the environment and build process in a comprehensive report which acts as a detailed handbook, describing every step involved in building the source code into the working application.
Escrow Now: Recommended where source code maintenance would be undertaken by a third party on behalf of the end user in the event of release. It provides all the benefits of a Full Verification with the additional assurance that the build takes place in an independent secure location - our secure test laboratory. In addition to the documentation of the build, the report also provides information on the timescales, technical skills and costs associated with a rebuild to assist with the selection of a suitable third party.
Escrow Complete Recommended where source code maintenance would be undertaken by the licensee in the event of release. It provides all the benefits of Full Verification with the additional assurance of the build also being repeated in the licensee's environment. We collect the source code and build it at the supplier's site and then build and install it at the user's site.
Integrity Plus verification testing recommended for other material which cannot be checked through a build process or during the development of software. We conduct a sample audit of the material held by working with the supplier to collate the material, ensuring it is complete and fit for the intended purpose.