Certified Information Systems Security Professional (CISSP) — Question 380

When auditing the Software Development Life Cycle (SDLC) which of the following is one of the high-level audit phases?

Answer options

• A. Planning
• B. Risk assessment
• C. Due diligence
• D. Requirements

Correct answer: A

Explanation

The correct answer is A. Planning is a crucial phase in the auditing process as it sets the foundation for the entire audit. The other options, while important aspects of the SDLC, do not specifically represent high-level phases in the audit process.