Which of the following would BEST help to ensure appropriate security controls are built into software?

• A.Providing standards for implementation during development activities
• B.Integrating security throughout the development process
• C.Providing security training to the software development team
• D.Performing security testing prior to deployment

Comment: *

Name: *

Email: *

Verification: *

IT projects have gone over budget with too many security controls being added post-production. Which of the following would MOST help to ensure that relevant controls are applied to a project?

• A.Providing stakeholders with minimum information security requirements
• B.Involving information security at each stage of project management
• C.Identifying responsibilities during the project business case analysis
• D.Creating a data classification framework and providing it to stakeholders

Comment: *

Name: *

Email: *

Verification: *

A multinational organization is required to follow governmental regulations with different security requirements at each of its operating locations. The chief information security officer (CISO) should be MOST concerned with:

• A.developing a security program that meets global and regional requirements.
• B.ensuring effective communication with local regulatory bodies.
• C.using industry best practice to meet local legal regulatory requirements.
• D.monitoring compliance with defined security policies and standards.

Comment: *

Name: *

Email: *

Verification: *

During the initiation phase of the system development life cycle (SDLC) for a software project, information security activities should address:

• A.cost-benefit analyses.
• B.benchmarking security metrics.
• C.baseline security controls.
• D.security objectives.

Comment: *

Name: *

Email: *

Verification: *

A Seat a-hosting organization's data center houses servers, appli
BEST approach for developing a physical access control policy for the organization?

• A.Review customers' security policies.
• B.Conduct a risk assessment to determine security risks and mitigating controls.
• C.Develop access control requirements for each system and application.
• D.Design single sign-on (SSO) or federated access.

Comment: *

Name: *

Email: *

Verification: *