You are the security manager for a software development firm. Your company is interested in using a managed cloud service provider for hosting its testing environment. Previous releases have shipped with major flaws that were not detected in the testing phase; leadership wants to avoid repeating that problem. What tool/technique/technology might you suggest to aid in identifying programming errors?

Question

Accepted Answer

B. Open source review Open-source review involves examining the code of open-source components used within the software to identify known vulnerabilities, bugs, or insecure practices that could lead to programming errors in the final product.

Answer

A. Vulnerability scans Vulnerability scans primarily identify known security weaknesses in applications or systems, not necessarily general programming errors or logic flaws.

Answer

C. SOC audits SOC audits (Service Organization Control audits) assess an organization's internal controls related to security, availability, processing integrity, confidentiality, and privacy, but they don't directly identify programming errors in source code.

Answer

D. Regulatory review Regulatory review assesses compliance with laws and regulations, which does not directly involve identifying programming errors in software.

You are the security manager for a software development firm. Your company is interested in using a managed cloud service provider for hosting its testing environment. Previous releases have shipped…

Question

Options

How the community answered

Why each option

Topics

Community Discussion