Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. Identify information security controls in the requirements analysis. The best way to ensure that information security risk factors are mitigated when developing in-house applications is to identify information security controls during the requirements analysis phase. This means integrating security considerations into the early stages of the application development process. By doing so, you can define security requirements, identify potential risks, and specify controls that need to be implemented to mitigate those risks.
Agree with C.
Without a doubt: Tasks that determine the needs or conditions to meet a new or altered solution, accounting for multiple perspectives, e.g., balancing stakeholder needs and constraints, allocation of requirements to components, breaking down complex requirements to lower level requirements (CMMI).