CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ155

VerifiedSecure Software Requirements

Which of the following documents is defined as a source document and is most useful to the ISSE when classifying the required security functionality?

Explanation

An Information Protection Policy (IPP) records the information-protection needs, including threats to information management and the security services and controls required to address them. It therefore provides the basis for classifying the necessary security functionality.

Community Discussion

No comments yet. Be the first to start the discussion!