CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ239

VerifiedSecurity Assessment and Testing

A Chief Information Security Officer (CISO) is reviewing several proposals to assess security weaknesses and vulnerabilities at the source-code level. Which of the following items BEST enables the CISO to make informed decisions for the organization?

Explanation

The Common Weakness Risk Analysis Framework (CWRAF) supports consistent scoring and prioritization of software weaknesses based on the organization’s business or mission context. It can identify the weaknesses most important to that environment, making it suitable for risk-based organizational decisions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!