Which of the following is the least effective privacy preserving practice in the Systems Development Life Cycle (SDLC)?
Which of the following is the least effective privacy preserving practice in the Systems Development Life Cycle (SDLC)?
Reviewing the code against Open Web Application Security Project (OWASP) Top 10 Security Risks is primarily focused on security risks rather than directly addressing privacy concerns. While security is important for protecting privacy, privacy-specific practices such as threat modeling for privacy, following privacy coding standards, and developing data flow models to track sensitive data are more directly aimed at preserving privacy.
I think it's D. It focuses on security more than privacy.
I think it's D. It focuses on security more than privacy.