Exam CISSP topic 1 question 476 discussion

Economy of mechanism = Simple code.

B https://www.cisa.gov/uscert/bsi/articles/knowledge/principles/economy-of-mechanism

B. Economy of mechanism "Economy of mechanism" is a principle that suggests that security mechanisms should be as simple as possible to reduce the potential for vulnerabilities and to make it easier to understand and test security controls. When a design becomes overly complex, it can introduce increased risk, as in this case where the test team lead cannot determine how to test certain security controls. Simplifying the design and security controls can help mitigate these risks and improve the overall security posture.

The principle of economy of mechanism states that security mechanisms should be as simple as possible. If a design and implementation are simple, fewer possibilities exist for errors. The checking and testing process is less complex, because fewer components and cases need to be tested.