Secure coding can be developed by applying which one of the following?

An acceptable use policy governs how end users may use organizational IT resources and does not provide technical coding standards or development security controls.

Industry best practice coding guidelines, such as those published by OWASP (e.g., the OWASP Secure Coding Practices Quick Reference Guide) or CERT, provide developers with specific, technically validated rules for preventing common vulnerabilities like injection flaws, buffer overflows, and authentication weaknesses. These guidelines are developed by security experts and are broadly applicable across programming languages and platforms, forming the foundation of a secure software development lifecycle (SSDLC).

Rapid Application Development (RAD) is a software development methodology focused on speed and iterative delivery, not on embedding security controls or secure coding standards into the development process.

A Web Application Firewall (WAF) policy is a runtime security control that filters malicious HTTP traffic at the network perimeter, but it does not guide developers on how to write secure code during the development phase.