CISSP Practice Question (Domain 8: Software Development Security)
A logistics firm's developers source a third of new code, including payment logic shipping in two weeks, from an AI coding assistant. The coding standard and review gates never mention assistant output. What should the security manager do FIRST?
A. Run static analysis on the AI-written code
B. Suspend the assistant pending vendor security review
C. Extend the coding standard and review gates to assistant output
D. Require developers to tag every assistant-written change
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
2
5 comments
Vincent Primiani
7
CISSP Practice Question (Domain 8: Software Development Security)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by