Exam CISA topic 1 question 1009 discussion

best method for ensuring that security requirements are considered throughout the Agile software development lifecycle is: C. Documenting security control requirements and obtaining internal audit sign-off. Here's why: Documentation and sign-off provide formal validation that security controls have been considered and implemented as required. Even in an Agile environment where flexibility is key, there should still be a formal checkpoint to ensure accountability, especially when dealing with critical security requirements.

Including project team members with security expertise is the most effective approach for integrating security considerations into the agile software development life cycle.

A. Including project team members who can provide security expertise Including project team members with security expertise is the best control to ensure that security requirements are considered throughout the life cycle of an agile software development project. This approach integrates security considerations directly into the development process, allowing for timely identification and mitigation of security risks. Options B, C, and D do not align with agile principles and may hinder the flexibility and efficiency of the agile development process.