A backdoor has been identified that enabled a cyberattack on an organization's systems. Integrating which of the following into the software development life cycle would BEST enable the organization…

The correct answer is C. Vulnerability testing. Vulnerability testing integrated into the SDLC - including static analysis (SAST), dynamic analysis (DAST), and penetration testing - is specifically designed to detect security weaknesses such as backdoors before software is deployed. Separation of duties (A) reduces insider…

Submitted by ahmad_uae· Apr 18, 2026Information Security Program Development and Management

Question

A backdoor has been identified that enabled a cyberattack on an organization's systems. Integrating which of the following into the software development life cycle would BEST enable the organization to mitigate similar attacks in the future?

Options

ASeparation of duties
BCustomized developer training
CVulnerability testing
DEnhanced user acceptance testing (UAT)

How the community answered

(32 responses)

A
13% (4)
B
3% (1)
C
75% (24)
D
9% (3)

Explanation

Vulnerability testing integrated into the SDLC - including static analysis (SAST), dynamic analysis (DAST), and penetration testing - is specifically designed to detect security weaknesses such as backdoors before software is deployed. Separation of duties (A) reduces insider risk but wouldn't catch a backdoor already in code. Developer training (B) helps over time but is not a direct detection mechanism. Enhanced UAT (D) focuses on functional correctness, not security flaws. Vulnerability testing directly targets the class of weakness (unauthorized access paths) that a backdoor represents.

Topics

#Secure SDLC#Vulnerability Testing#Application Security#Preventive Controls

Community Discussion

No community discussion yet for this question.

Full CISM Practice