CSSLP · Question #9
What are the various activities performed in the planning phase of the Software Assurance Acquisition process? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. Develop software requirements. C. Develop evaluation criteria and evaluation plan. D. Create acquisition strategy.. The planning phase of the Software Assurance Acquisition process involves developing software requirements, creating the acquisition strategy, and establishing the evaluation criteria and plan for assurance.
Question
What are the various activities performed in the planning phase of the Software Assurance Acquisition process? Each correct answer represents a complete solution. Choose all that apply.
Options
- ADevelop software requirements.
- BImplement change control procedures.
- CDevelop evaluation criteria and evaluation plan.
- DCreate acquisition strategy.
How the community answered
(36 responses)- A89% (32)
- B11% (4)
Why each option
The planning phase of the Software Assurance Acquisition process involves developing software requirements, creating the acquisition strategy, and establishing the evaluation criteria and plan for assurance.
Developing software requirements establishes the functional, performance, and security needs of the software to be acquired, which is a foundational activity in the planning phase.
Implementing change control procedures typically occurs during the execution, development, or maintenance phases, after requirements are established and development or integration begins, rather than primarily within the initial planning phase.
Developing evaluation criteria and an evaluation plan ensures that the acquired software's quality and security can be adequately assessed against predefined metrics during the acquisition process.
Creating an acquisition strategy defines the overall approach, timeline, and resources for procuring the software, outlining the strategic direction for the entire acquisition.
Concept tested: Software Assurance Acquisition planning activities
Source: https://csrc.nist.gov/publications/detail/sp/800-161/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.