Information Assurance in System Development and Acquisition

What is an emerging trend in software engineering regarding information assurance?

• Ignoring information assurance in system development

• Consideration of information assurance requirements during system design and development

• Postponing information assurance until the implementation phase

• Outsourcing information assurance activities

When should secure design be integrated into system development?

• During the disposal phase

• After the implementation phase

• At the beginning and throughout all stages of system development

• Only during the initiation phase

Why are countermeasures most effective when planned from the initial planning phase?

• They are cheaper to implement

• They prevent all security breaches

• They are easier to manage

• They can be integrated seamlessly into the system

What is a benefit of integrating information assurance into system development methods from the start?

• It reduces the need for security audits

• It prevents any disruptions to current operations

• It eliminates the need for security controls

• It increases the need for operation

What should be updated regularly throughout the use of a system?

• System requirements

• User manuals

• System security plan

• Hardware components

In which phase of the System Development Life Cycle (SDLC) is the need for a system established?

• Acquisition/Development

• Operation/Maintenance

• Implementation

• Initiation

What is done during the Security Categorization phase?

• Risk assessment

• Determining system functionality

• Identifying information categories

• Implementing security controls

1. What is the purpose of initial risk assessment?

• To identify system vulnerabilities

• To develop security specifications

• To determine the budget

• To establish security requirements based on sensitivity

1. What is involved in the Budgeting phase?

• Developing user manuals

• Determining hardware requirements

• Identifying security controls

• Estimating costs

1. What is the focus of the Implementation phase?

• System testing

• System integration

• Security planning

• Risk assessment