CISSP: Certified Information Systems Security Professional

Question

An architect observes that the complexity of a new design has created increased risk. After a review, the test team lead cannot determine how to test some of the security controls the organization requires to be implemented. Which of the following secure design principles has MOST likely been violated?

Explanation

Economy of mechanism requires security mechanisms and designs to remain as simple as practical so they can be understood, analyzed, verified, and tested effectively. Excessive complexity that makes required security controls difficult to test violates this principle.

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ235

Community Discussion