nerdexam
(ISC)2

CSSLP · Question #9

What are the various activities performed in the planning phase of the Software Assurance Acquisition process? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Develop software requirements. C. Develop evaluation criteria and evaluation plan. D. Create acquisition strategy.. The planning phase of the Software Assurance Acquisition process involves developing software requirements, creating the acquisition strategy, and establishing the evaluation criteria and plan for assurance.

Secure Software Lifecycle Management

Question

What are the various activities performed in the planning phase of the Software Assurance Acquisition process? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ADevelop software requirements.
  • BImplement change control procedures.
  • CDevelop evaluation criteria and evaluation plan.
  • DCreate acquisition strategy.

How the community answered

(36 responses)
  • A
    89% (32)
  • B
    11% (4)

Why each option

The planning phase of the Software Assurance Acquisition process involves developing software requirements, creating the acquisition strategy, and establishing the evaluation criteria and plan for assurance.

ADevelop software requirements.Correct

Developing software requirements establishes the functional, performance, and security needs of the software to be acquired, which is a foundational activity in the planning phase.

BImplement change control procedures.

Implementing change control procedures typically occurs during the execution, development, or maintenance phases, after requirements are established and development or integration begins, rather than primarily within the initial planning phase.

CDevelop evaluation criteria and evaluation plan.Correct

Developing evaluation criteria and an evaluation plan ensures that the acquired software's quality and security can be adequately assessed against predefined metrics during the acquisition process.

DCreate acquisition strategy.Correct

Creating an acquisition strategy defines the overall approach, timeline, and resources for procuring the software, outlining the strategic direction for the entire acquisition.

Concept tested: Software Assurance Acquisition planning activities

Source: https://csrc.nist.gov/publications/detail/sp/800-161/rev-1/final

Topics

#Software Acquisition#Planning Phase#Software Requirements#Acquisition Strategy

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice