Apply Security Risk Management Principles ISSEP Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   During which phase of the system development lifecycle (SDLC) should security risk management activities first be initiated?

   • AImplementation
   • BDevelopment
   • COperations and maintenance
   • DInitiation
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which statement best describes how risk management should be applied throughout the system development lifecycle (SDLC)?

   • AIt should be performed only by external auditors at the end of each phase
   • BIt should be a continuous process that is revisited at each phase of the SDLC
   • CIt should be performed once at the beginning of the project and then not revisited
   • DIt should be performed only after the system is fully deployed and in production
   Reveal Solution Discussion Select an answer first