4.3 Security Across the Technology Life Cycle

Question	Answer
What is considered in the end-to-end ownership?	Operational activities, maintenance, commissioning/decommissioning, disposal, reuse
What is an operational activity?	day to day operations
What are a few asset disposal terms?	- Data purging - Data clearing - Remanence
What is SDLC?	Systems Development Life Cycle
What are the 5 steps of SDLC?	- Initiate - Acquire / Develop - Implement - Operate / Maintain - Dispose
What is STRM?	Security Requirements Traceability Matrix
What are the steps of a vulnerability cycle?	Network => Service => Application => Client => Organization => Repeat

Resource summary

	Created by DJ Perrone almost 8 years ago