Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISM Exam - Topic 6 Question 2 Discussion

To integrate security into system development fie cycle (SDLC) processes, an organization MUST ensure that security.
C) Is a represented on the configuration control board.
A) Roles and responsibly have been defined
B) Is a prerequisite for complete of major phases
D) Performance metrics have been met.

Isaca CISM Exam - Topic 6 Question 2 Discussion

Actual exam question for Isaca's CISM exam
Question #: 2
Topic #: 6
[All CISM Questions]

To integrate security into system development fie cycle (SDLC) processes, an organization MUST ensure that security.

Show Suggested Answer Hide Answer
Suggested Answer: C

by Renea at May 06, 2022, 11:33 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Loise
8 months ago
Surprised this isn't more emphasized in SDLC discussions!
upvoted 0 times
...
Virgie
9 months ago
Wait, performance metrics? Isn't that a bit off-topic?
upvoted 0 times
...
Lenora
9 months ago
Definitely agree on the configuration control board!
upvoted 0 times
...
Doretha
9 months ago
I think it should be a prerequisite for major phases.
upvoted 0 times
...
Marcos
9 months ago
Security roles and responsibilities are crucial!
upvoted 0 times
...
Julian
9 months ago
I don't think performance metrics are directly related to integrating security into the SDLC, but I might be missing something important.
upvoted 0 times
...
Michael
9 months ago
I feel like security should be a prerequisite for completing major phases, but I can't recall if that's the best answer here.
upvoted 0 times
...
Olene
9 months ago
I think I remember something about defining roles and responsibilities being crucial for security in the SDLC, but I'm not entirely sure if that's the only thing that matters.
upvoted 0 times
...
Aileen
9 months ago
I practiced a question similar to this where security was tied to configuration control boards, so I'm leaning towards option C, but I could be wrong.
upvoted 0 times
...
Crista
9 months ago
Hmm, I'm a little unsure about this one. I know regression testing is important, but I'm not sure which model it's most associated with.
upvoted 0 times
...
Jerry
9 months ago
I seem to recall that self-funded plans don't have to follow state mandates, which might conflict with option C, but I'm not entirely sure.
upvoted 0 times
...
Ria
9 months ago
I'm pretty confident this is asking about the full scope of the Development Team's skills. I think option B is the best answer - they need to be able to turn the Product Backlog into a shippable product.
upvoted 0 times
...
Maurine
10 months ago
I feel pretty good about this question. The criteria for determining cash equivalents and the composition of the sales order backlog seem like the types of information that should be disclosed in a summary of significant accounting policies. I'll double-check my reasoning, but I think I have a solid strategy for approaching this.
upvoted 0 times
...

Save Cancel