A mature IT environment ensures that security requirements, implementation and testing occur at the correct times throughout the _________.

Question

BlackTom AI · Accepted Answer

The SDLC defines the phased lifecycle for developing, deploying, and maintaining information systems, so security requirements, implementation, and testing must be integrated into those phases.

1) Relevant knowledge points and concepts:
- SDLC (System Development Life Cycle): typical phases are Requirements, Design, Implementation (coding), Testing, Deployment, and Maintenance.  
- Secure SDLC / “shift-left” security: integrating security activities (requirements, threat modeling, secure coding, security testing) early and throughout the SDLC.  
- BCP, DRP, ISCP are continuity/incident documents, not development lifecycles: BCP = Business Continuity Plan, DRP = Disaster Recovery Plan, ISCP = Information System Contingency/Incident Response Plan.

2) Step-by-step reasoning:
- Security requirements must be captured during the Requirements phase so design and implementation accommodate them.  
- During Design, threat modeling and architecture review define controls and how requirements map to system components.  
- Implementation phase applies secure coding practices and control implementations.  
- Testing phase verifies security controls via SAST/DAST, code review, and penetration testing before deployment.  
- Deployment and Maintenance include secure configuration, monitoring, patching, and repeating testing as changes occur.  
Therefore, security tasks occur at the correct times throughout the SDLC.

3) Calculations: none required; reasoning is conceptual and sequential.

4) Why the correct answer is correct:
SDLC is explicitly the lifecycle framework where requirements, implementation, and testing are planned and executed. Integrating security into each SDLC phase ensures controls are built in rather than bolted on.

5) Why other options are incorrect:
- BCP (Business Continuity Plan) addresses how business functions continue during disruptions, not the timing of development tasks.  
- DRP (Disaster Recovery Plan) focuses on restoring IT services after disasters, not on development-phase security integration.  
- ISCP (Information System Contingency/Incident Response Plan) deals with contingency/incident actions for a system, not the full development lifecycle scheduling of requirements, implementation, and testing.

6) Conclusion:
Because security activities are integrated across Requirements, Design, Implementation, Testing, Deployment, and Maintenance, the correct answer is SDLC, which matches the provided answer.

A mature IT environment ensures that security requirements, implementation and testing occur at the correct times throughout the _________.单项选择题

类似问题

Under what conditions does the SDLC work best, in the context of systems development? Check all that apply.

Which of the following is least likely to be a good candidate for an SDLC development process?

A programming language needs to be selected to create the software.In which phase is the selected programming language used to create the software?

The ADCT loop involves cycling through which of the following activities until the system meets quality standards?

In which order are the project stages completed?

Question at position 22 The steps of the systems development life cycle can only be viewed as a linear process. TrueFalse

Question at position 18 The steps of the systems development life cycle can only be viewed as a linear process. TrueFalse

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单