Study. uk . com
  1. Home
  2. All questions
  3. Question 378

CISM study material · question 378 of 1000

An organisation adopts a secure development standard and considers the outcome achieved. Which further expectation does CSF 2.0 attach?

  1. The performance of those practices is monitored throughout the software development life cycle
  2. The standard is applied only to internet-facing applications
  3. Developers are individually certified against the standard
  4. The standard is certified by an external body
Show the answer

Answer: A. The performance of those practices is monitored throughout the software development life cycle

CSF 2.0 subcategory PR.PS-06 requires secure software development practices to be integrated and their performance monitored throughout the software development life cycle, rather than assumed effective once adopted.

Source: NIST CSWP 29 (NIST) — Appendix A PR.PS-06

Challenge yourself on this topic → Study as cards