Study. uk . com
  1. Home
  2. All questions
  3. Question 96

CISM study material · question 96 of 1000

A manager is aligning security activities to the system development life cycle. Which sequence of phases does NIST describe?

  1. Initiation, development or acquisition, implementation, operation and maintenance, disposal
  2. Planning, design, build, test, release
  3. Identify, protect, detect, respond, recover
  4. Categorise, select, implement, assess, authorise and monitor, which is the sequence NIST gives for the development life cycle
Show the answer

Answer: A. Initiation, development or acquisition, implementation, operation and maintenance, disposal

SP 800-39 states there are typically five phases in system development life cycles: initiation, development or acquisition, implementation, operation and maintenance, and disposal.

Source: NIST SP 800-39 (NIST) — Sec. 2.5 footnote 42

Challenge yourself on this topic → Study as cards