QuestionQ242Verified/Software Development SecurityCopy linkReport a problemAsk AstroTutorSave questionDuring which process must security be considered when acquiring new software?ARequest for proposal (RFP)BImplementationCVendor selectionDContract negotiationShow AnswerAnswerExplanationSecurity must be addressed in the request for proposal (RFP) so that required security features, procedures, assurances, and contractual tasks are specified before vendors prepare proposals. NIST SP 800-64 Rev. 1 identifies RFPs and statements of work as vehicles for acquiring information-security requirements.Learn moreNIST SP 800-64 Rev. 1: Security Considerations in the Information System Development Life CycleShow comments8Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion