1d • 🙋♂️ CISSP
CISSP Practice Question (Domain 8: Software Development Security)
A sales team built a customer portal on a low-code platform without security involvement and wants it live Monday. It holds customer contracts and nobody owns its code or data. What should the security manager do FIRST?
A. Schedule a penetration test before Monday
B. Move the portal into the corporate development pipeline
C. Assess the portal's data, risk and ownership before release
D. Require secure coding training for the sales team
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
1
12 comments
CISSP Practice Question (Domain 8: Software Development Security)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+32
2
+23
3
+22
4
+17
5
+14
Powered by