1. Home
2. All questions
3. Question 475

CISSP study material · question 475 of 500

OWASP names a factor that contributes to insecure design and explains why the design was never made secure enough. What is it?

• Software security

1. No dedicated security architect on the team, so no design review took place.
2. No inventory of third-party components, so their design could not be assessed.
3. No business risk profiling of the software, so nobody determined what level of security design was required.
4. No automated testing in the build pipeline, so design defects were never detected.

Challenge yourself on this topic → Study as cards