Vulnerability identification should begin in which phase of an in-house software development project?

The correct answer is B. Design phase. Vulnerability identification should begin in the design phase of an in-house software development project. Identifying and addressing security concerns early in the design phase helps mitigate risks before the development and implementation phases, reducing the chances of…

Submitted by suresh_in· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Options

ADevelopment phase
BDesign phase
CRequirements definition phase
DImplementation phase

How the community answered

(29 responses)

A
7% (2)
B
86% (25)
C
3% (1)
D
3% (1)

Explanation

Vulnerability identification should begin in the design phase of an in-house software development project. Identifying and addressing security concerns early in the design phase helps mitigate risks before the development and implementation phases, reducing the chances of vulnerabilities being introduced later in the process.

Topics

#Secure SDLC#Software Development Life Cycle#Vulnerability Identification#Shift Left Security

Community Discussion

No community discussion yet for this question.

Full CISA Practice