Computer Science Incorporating Security Throughout the SDLC Questions

A)

1.  Why is it important to incorporate security throughout the SDLC instead of just in one phase or another? Please discuss.

2.  What role do DevSecOps and Continuous Delivery/Continuous integration play?

B)

Part 1A.  Explain in your own words what the DIKW Pyramid means to you. 

Part 1.  Mrs. Beasley would like you to briefly explain the secure design principles (S&S) 

She also understands that NIST SP 800-160V1 may provide some recommended security design principles.  Review these principles and the similarities and differences between the two principles.  

Part 2.  Mrs. Beasley is not sure what to do.  Mr. Scott called and asked her for her help.  Techworx wants to get into the 

autonomous vehicle industry.  Recall we now work at a company called “Software is Us”.  They need “Software is Us” to develop the software for their vehicles.  She has to call Mr. Scott back later today.  

What do you want Mrs. Beasley to tell Mr. Scott and what 3-5 design principles will be the most critical in this project?