Discuss Isaca CISM Exam Topic 6 Question 2

To integrate security into system development fie cycle (SDLC) processes, an organization MUST ensure that security.

ARoles and responsibly have been defined

BIs a prerequisite for complete of major phases

CIs a represented on the configuration control board.

DPerformance metrics have been met.

Suggested Answer: C

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Loise 11 months ago

Surprised this isn't more emphasized in SDLC discussions!

Virgie 12 months ago

Wait, performance metrics? Isn't that a bit off-topic?

Lenora 12 months ago

Definitely agree on the configuration control board!

Doretha 12 months ago

I think it should be a prerequisite for major phases.

Marcos 1 year ago

Security roles and responsibilities are crucial!

Julian 1 year ago

I don't think performance metrics are directly related to integrating security into the SDLC, but I might be missing something important.

Michael 1 year ago

I feel like security should be a prerequisite for completing major phases, but I can't recall if that's the best answer here.

Olene 1 year ago

I think I remember something about defining roles and responsibilities being crucial for security in the SDLC, but I'm not entirely sure if that's the only thing that matters.

Aileen 1 year ago

I practiced a question similar to this where security was tied to configuration control boards, so I'm leaning towards option C, but I could be wrong.

Crista 1 year ago

Hmm, I'm a little unsure about this one. I know regression testing is important, but I'm not sure which model it's most associated with.

Jerry 1 year ago

I seem to recall that self-funded plans don't have to follow state mandates, which might conflict with option C, but I'm not entirely sure.

Ria 1 year ago

I'm pretty confident this is asking about the full scope of the Development Team's skills. I think option B is the best answer - they need to be able to turn the Product Backlog into a shippable product.

Maurine 1 year ago

I feel pretty good about this question. The criteria for determining cash equivalents and the composition of the sales order backlog seem like the types of information that should be disclosed in a summary of significant accounting policies. I'll double-check my reasoning, but I think I have a solid strategy for approaching this.

Isaca CISM Exam - Topic 6 Question 2 Discussion