A software development team has spent the last 18 months developing a new web-based front-end that will allow clients to check the status of their orders as they proceed through manufacturing. The marketing team schedules a launch party to present the new application to the client base in two weeks. Before the launch, the security team discovers numerous flaws that may introduce dangerous vulnerabilities, allowing direct access to a database used by manufacturing. The development team did not plan to remediate these vulnerabilities during development. Which of the following SDLC best practices should the development team have followed?
A) Implementing regression testing
B) Completing user acceptance testing
C) Verifying system design documentation
D) Using a SRTM

Question

Quizplus · Accepted Answer

Using a Security Requirements Traceability Matrix (SRTM) would have helped the development team ensure that security requirements were identified, tracked, and addressed throughout the development process, potentially preventing the introduction of vulnerabilities.

A Software Development Team Has Spent the Last 18 Months