The Software Security Code of Practice is a voluntary code for technology providers, and outlines the security principles expected of all organisations that develop and/or sell software.
You will find it helpful if you develop your own software, or are purchasing software from others, such as a new CRM solution.
It should help inform your conversations abut security, and act as a benchmark to score potential software suppliers.
You can find out more using the link https://www.ncsc.gov.uk/section/software-security-code-of-practice/overview.