Which of the following security procedures is related to the SDLC's implementation?

Question

Options

• ARisk assessment
• BMedia sanitation
• CSecurity accreditation
• DInformation preservation

• A
  4% (2)
• B
  15% (8)
• C
  71% (37)
• D
  10% (5)

Explanation

Security accreditation is the formal management authorization that a system is approved to operate - it occurs at the end of the implementation phase of the SDLC, once the system has been built, tested, and is ready to go live. This is distinct from the other options because they map to different SDLC phases: risk assessment (A) belongs to the initiation/planning phase, where threats are evaluated before development begins; media sanitation (B) belongs to the disposal phase, when storage media is wiped or destroyed at end-of-life; and information preservation (D) is tied to operations/maintenance or disposal, ensuring data is retained or archived appropriately.

Memory tip: Think "A = Ahead of time (planning), B = Bye-bye (disposal), C = Clear to Launch (implementation), D = Done and stored (operations/disposal)." Accreditation is the green light that closes out implementation - you can't run the system until it's been accredited.

No community discussion yet for this question.