nerdexam
(ISC)2

CISSP · Question #1343

Which of the following phases in the software acquisition process does developing evaluation criteria take place?

The correct answer is B. Planning. Developing evaluation criteria is a Planning phase activity in the software acquisition process, where requirements and selection standards are established before contracting begins.

Submitted by weili_xi· Mar 5, 2026Software Development Security

Question

Which of the following phases in the software acquisition process does developing evaluation criteria take place?

Options

  • AFollow-On
  • BPlanning
  • CContracting
  • DMonitoring and Acceptance

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    89% (33)
  • C
    5% (2)
  • D
    3% (1)

Why each option

Developing evaluation criteria is a Planning phase activity in the software acquisition process, where requirements and selection standards are established before contracting begins.

AFollow-On

The Follow-On phase occurs after the initial acquisition cycle and involves decisions about renewing, replacing, or extending an existing contract, not establishing initial evaluation criteria.

BPlanningCorrect

During the Planning phase of software acquisition, the organization defines its needs, establishes requirements, and develops evaluation criteria used to assess potential vendors and solutions. This groundwork must occur before solicitation or contracting can proceed, ensuring that objective, measurable standards exist to guide source selection and procurement decisions.

CContracting

The Contracting phase involves executing the solicitation, evaluating proposals against already-established criteria, and awarding the contract - the criteria itself must be developed beforehand in Planning.

DMonitoring and Acceptance

The Monitoring and Acceptance phase focuses on overseeing vendor performance, testing deliverables, and accepting completed work after a contract is already in place, not on creating evaluation standards.

Concept tested: Software acquisition lifecycle phases and planning activities

Source: https://csrc.nist.gov/publications/detail/sp/800-218/final

Topics

#Software acquisition#SDLC phases#project planning#evaluation criteria

Community Discussion

No community discussion yet for this question.

Full CISSP Practice