CISSP-ISSAP: Information Systems Security Architecture Professional

Question

Which SDLC phase includes the following security controls?

Misuse Case Modeling
Security Design and Architecture Review
Threat and Risk Modeling
Security Requirements and Test Cases Generation

Explanation

These controls are design-phase activities: they model abusive behavior and threats, review the security architecture, assess risks, and use those results to derive security requirements and security test cases before implementation.

CISSP-ISSAP: Information Systems Security Architecture Professional

AstroTutor

Notes

Readiness

QuestionQ124

Community Discussion