CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ51

VerifiedInformation Security Risk Management

IT projects have exceeded their budgets because too many security controls were added after production. Which of the following would MOST help ensure that security controls are relevant to a project?

Explanation

Involving information security at every stage of project management integrates security requirements and controls into planning, design, development, testing, and implementation. This keeps controls aligned with project risks and requirements and reduces costly post-production additions.

Community Discussion

No comments yet. Be the first to start the discussion!