SSCP · Question #284
When considering an IT System Development Life-cycle, security should be:
The correct answer is C. Treated as an integral part of the overall system design. Security must be considered in information system design. Experience has shown it is very difficult to implement security measures properly and successfully after a system has been developed, so it should be integrated fully into the system life-cycle process. This includes…
Question
Options
- AMostly considered during the initiation phase.
- BMostly considered during the development phase.
- CTreated as an integral part of the overall system design.
- DAdded once the design is completed.
How the community answered
(19 responses)- A5% (1)
- C89% (17)
- D5% (1)
Explanation
Security must be considered in information system design. Experience has shown it is very difficult to implement security measures properly and successfully after a system has been developed, so it should be integrated fully into the system life-cycle process. This includes establishing security policies, understanding the resulting security requirements, participating in the evaluation of security products, and finally in the engineering, design, implementation, and disposal of the system.
Topics
Community Discussion
No community discussion yet for this question.