CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ75

VerifiedSecure Software Requirements

Which SDLC phase includes these security controls: misuse-case modeling, security design and architecture review, threat and risk modeling, and security requirements and test-case generation?

Explanation

These controls analyze the proposed system’s architecture and attack surface, identify and prioritize risks, and translate the resulting mitigations into security requirements and test cases. Those are core security activities of the design phase.

Community Discussion

No comments yet. Be the first to start the discussion!