Exam CISA All QuestionsBrowse all questions from this exam
Question 660

Which of the following would BEST help to ensure that potential security issues are considered by the development team as part of incremental changes to agile- developed software?

    Correct Answer: D

    Including a mandatory step to analyze the security impact when making changes best ensures that potential security issues are considered by the development team during incremental changes to agile-developed software. This proactive approach aligns with agile principles and helps prevent security issues before they manifest.

Discussion
SwallowsOption: D

Deploying changes in a controlled environment (option A) is reactive and focuses more on identifying issues after changes have been made. On the other hand, option D focuses on preventing security issues by requiring the development team to actively analyze the security impact before implementing changes. This proactive approach aligns well with agile principles of early and continuous delivery of valuable software.