CT-SEC: Certified Tester Security Tester

By ISTQB · Question Mode

QuestionQ2

Security Testing Throughout the Software Lifecycle

Sophie is assessing the security requirements in user stories to confirm that the security-related elements of users’ needs are adequately addressed. She is also determining the most practical approach for developing the application securely.

During which software development life cycle stage should this activity occur?

Explanation

The requirements stage establishes and analyzes functional and nonfunctional requirements, including security requirements derived from user needs and user stories. Identifying these needs early ensures that security constraints guide later design and development work.

Community Discussion

No comments yet. Be the first to start the discussion!