Why has TPN now included Software Applications?

With the accelerated move to cloud workflows during the pandemic, TPN published the MPA Best Practices v5.1 in October 2022, which includes application/cloud security issues. Given the shift away from centralized onsite work, a detailed understanding of the full on-prem and cloud technology stack is necessary for purchasers to gain a serious understanding of security risks and issues. The TPN program and TPN+ profiles now request that Service Providers report security status for services, locations and owned and/or licensed applications.