CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ227

VerifiedSecurity and Risk Management

To meet the project delivery deadline, a web application developer used readily available software components. What is the BEST way to reduce the risk associated with this practice?

Explanation

Third-party and reusable software components can introduce vulnerabilities or insecure configurations, so an effective control is a formal process that verifies the components and their settings meet security and operational requirements. NIST SSDF guidance calls for verifying third-party software components comply with organizational requirements throughout their life cycles.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!