Question 361 · 363 in bank
An analysis of an organization's security breach is complete. The results indicate that the quality of the code used for updates to its primary customer-facing software has been declining and security flaws were introduced. The FIRST IT governance action to correct this problem should be to review:
Show answer
Answer: B
Explanation
The FIRST IT governance action to correct the problem of declining code quality and introduced security flaws in updates to the primary customer-facing software should be to review: B. The change management control framework. Reviewing the change management control framework is the most appropriate initial step to address the problem described. The change management control framework encompasses processes and procedures for managing changes to software systems, including updates and modifications. By reviewing the framework, the organization can identify any gaps or weaknesses that allowed the introduction of flawed code and security vulnerabilities during the update process. This review helps ensure that robust controls and practices are in place to maintain the integrity and security of the software throughout the development and deployment lifecycle.
Source: Adapted from community discussion — Frank1480