Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Cybersecurity FundamentalsMedium
An organization is developing a new mobile application that will handle sensitive user data. To ensure the application's security posture is robust throughout its development, deployment, and maintenance, the development team decides to integrate security considerations into every phase of the software development lifecycle (SDLC). Which cybersecurity concept does this approach best represent?
- AVulnerability Management
- BSecurity by Design
- CIncident Response
- DDigital Forensics
Show answer & explanationAnswer & explanation
Correct answer: B. Security by Design
Security by Design, also known as 'shift left security,' involves integrating security principles and practices from the very beginning of the software development lifecycle, rather than adding them as an afterthought.
Why the other options are wrong
- A. Vulnerability Management is about identifying and remediating weaknesses, which is a component of security by design but not the overarching concept.
- C. Incident Response focuses on handling security breaches after they occur, not preventing them during development.
- D. Digital Forensics involves investigating cybercrimes and data breaches after they have happened.
Security by Design
An approach to software and system development where security is considered and integrated into every stage of the development lifecycle, from initial design to deployment and maintenance.
- Also known as 'shift left security'.
- Aims to prevent vulnerabilities rather than remediate them later.
- Reduces costs and risks associated with security flaws.
Memory trick: Design means building it right from the start, not fixing it later.