The security of a computer application is MOST effective and economical in which of the following cases?
A.
The system is optimized prior to the addition of security.
B.
The system is procured off-the-shelf.
C.
The system is customized to meet the specific security threat.
D.
The system is originally designed to provide the necessary security.
Explanation:
The earlier in the process that security is planned for and implement the cheaper it is. It is also much more
efficient if security is addressed in each phase of the development cycle rather than an add-on because it gets
more complicated to add at the end. If security plan is developed at the beginning it ensures that security won’t
be overlooked.
Incorrect Answers:
A: If you wait to implement security after a system is completed the cost of adding security increases
dramatically and can become much more complex.
B: It is often difficult to add security to a system that has been procured off-the shelf.
C: This implies only a single threat.Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 298, 357