Free Preparation Discussions
MENU
ISC2 ISSMP Exam - Topic 4 Question 70 Discussion
Topic #: 4
Which of the following 'Code of Ethics Canons' of the '(ISC)2 Code of Ethics' states to act honorably, honestly, justly, responsibly and legally?
The various security controls in the SDLC design phase are as follows.
Misuse Case Modeling. It is important that the inverse of the misuse cases be modeled to understand and address the security aspects of the software. The requirements traceability matrix can be used to track the misuse cases to the functionality of the software.
Security Design and Architecture Review. This control can be introduced when the teams are engaged in the 'functional' design and architecture review of the software.
Threat and Risk Modeling. Threat modeling determines the attack surface of the software by examining its functionality for trust boundaries, data flow, entry points, and exit points. Risk modeling is performed by ranking the threats as they pertain to the users organization's business objectives, compliance and regulatory requirements and security exposures.
Security Requirements and Test Cases Generation. All the above three security controls, i.e., Misuse Case Modeling, Security Design and Architecture Review, and Threat and Risk Modeling are used to produce the security requirements.
Corazon
8 months agoJesus
8 months agoGerald
8 months agoAntonio
8 months agoMargarita
9 months agoMaia
9 months agoGregg
9 months agoSamuel
9 months agoIsabelle
9 months agoLatosha
9 months agoJulio
9 months agoIndia
10 months agoLindsey
1 year agoHelga
1 year agoKassandra
1 year agoGene
1 year agoMoon
1 year agoGilma
1 year agoSarah
1 year agoLavelle
1 year agoHoward
1 year agoLigia
1 year agoLemuel
1 year agoAnna
1 year agoValda
1 year agoLaine
1 year agoKiera
1 year agoTy
1 year agoMozell
1 year agoVeronika
1 year agoKarma
1 year agoLarae
1 year agoFrederica
1 year agoTasia
1 year agoStephen
1 year agoDierdre
1 year agoAlaine
1 year agoWalker
1 year ago