SDLC phases include a minimum set of security tasks that are required to effectively incorporate security in the system development process. Which of the following are the key security activities…

Question

Options

• APrepare initial documents for system certification and accreditation
• BConduct the risk assessment and use the results to supplement the baseline security controls
• CDetermination of privacy requirements
• DInitial delineation of business requirements in terms of confidentiality, integrity, and availability

• A
  82% (18)
• C
  14% (3)
• D
  5% (1)

Explanation

Key security activities for the development/acquisition phase are as follows: Conduct the risk assessment and use the results to supplement the baseline security controls Analyze security requirements Perform functional and security testing Prepare initial documents for system certification and accreditation Design security architecture Answer options D and C are incorrect. Key security activities for the initiation phase are as Initial definition of business requirements in terms of confidentiality, integrity, and availability Determination of information categorization and identification of known special handling requirements in transmitting, storing, or creating information Determination of privacy requirements

No community discussion yet for this question.