Which of the following are the key security activities for the initiation phase? Each correct answer represents a complete solution. Choose two.

Question

Options

• ADetermination of privacy requirements.
• BPerform functional and security testing.
• CInitial delineation of business requirements in terms of confidentiality, integrity, and availability.
• DAnalyze security requirements.

• A
  88% (23)
• B
  4% (1)
• D
  8% (2)

Explanation

Answer options C and A are correct. Key security activities for the initiation phase are as follows: - Initial definition of business requirements in terms of confidentiality, integrity, and availability - Determination of information categorization and identification of known special handling requirements in transmitting, storing, or creating information - Determination of privacy requirements Answer options D and B are incorrect. Key security activities for the development/acquisition phase are as follows: - Conduct the risk assessment and use the results to supplement the baseline security controls - Analyze security requirements - Perform functional and security testing - Prepare initial documents for system certification and accreditation - Design security architecture

No community discussion yet for this question.