Certified Secure Software Lifecycle Professional (CSSLP) Quiz Questions and Answers
Answer :
During the software design phase
Explanation :
Software retirement planning should be performed during the software design phase to ensure that the software is designed with retirement in mind and that retirement requirements are included in the design.
To provide a record of who has had access to the software and its components
Explanation :
Chain of custody involves providing a record of who has had access to the software and its components during the delivery process, ensuring that the software has not been tampered with or compromised.
Software retirement artifacts include retirement plans that provide a roadmap for retiring the software and ensuring that it is securely retired, preventing unauthorized access and data breaches.
To manage changes to the software and its environment
Explanation :
Software configuration management is important for managing changes to the software and its environment during the delivery process, ensuring that the software is delivered securely and reliably.
Contractual controls that should be in place when procuring software include contract negotiation to ensure that the supplier is contractually obligated to deliver secure and reliable software.
To remove the software from the environment and ensure that it is securely retired
Explanation :
Software decommissioning is important for removing the software from the environment and ensuring that it is securely retired, preventing unauthorized access and data breaches.
Software delivery artifacts include release notes that provide information about the software and its components, ensuring that the software is delivered securely and reliably.
Disposal planning should be performed during the software design phase to ensure that the software and its components can be securely disposed of at the end of their lifecycle.
Recycling the hardware through a certified e-waste recycler
Explanation :
Secure disposal methods for hardware used to run the software include recycling the hardware through a certified e-waste recycler to ensure that sensitive data is not exposed.
To provide a roadmap for retiring the software and ensuring that it is securely retired
Explanation :
A retirement plan is important for providing a roadmap for retiring the software and ensuring that it is securely retired, preventing unauthorized access and data breaches.