Week 5 - Secure System Development Lifecycle & Physical Security

What is the first step in conducting a thorough IT risk assessment?

• Identifying information assets.

• Conducting a cost-benefit analysis.

• Implementing security measures.

• Reviewing compliance requirements.

The primary purpose of the risk assessment framework mentioned in the text is to:

• Identify potential risks and mitigate them

• Enhance financial performance

• Improve employee satisfaction

• Expand market reach

Which of the following is NOT listed as a type of risk?

• Financial risk

• Market risk

• Technology risk

• Health risk

What is the main topic discussed in the passage related to system development?

• System architecture

• Software testing

• User interface design

• Project management

Why is it important to incorporate security considerations throughout the system development lifecycle?

• To ensure the system is protected against threats from the beginning

• To delay security implementation until the final stages

• To reduce the overall cost of the system

• To focus only on functionality and not security

What are some problems that can arise if security is not considered during the development of a mobile app?

• Data breaches and unauthorized access

• Improved user experience

• Faster app performance

• Increased app downloads

Which of the following is a step to prevent security issues in system development?

• Ignore security requirements

• Design architecture with security built-in

• Monitor security only after a breach

• Delay security testing until after deployment

Fill in the blank: Early security integration helps in _______ vs. reactive problem-solving.

• proactive

• reactive

• delayed

• passive

Early security integration affects developer perspective by:

• Improving code quality and reducing vulnerabilities

• Increasing development time and complexity

• Decreasing collaboration among team members

• Having no significant impact

Fill in the blank: Early security integration allows for better _______ and budget planning.

• security

• communication

• design

• implementation