2 cissp ® Official Study Guide Eighth Edition

Describe software development maturity models.
Know that maturity models help 
software organizations improve the maturity and quality of their software processes by 
implementing an evolutionary path from ad hoc, chaotic processes to mature, disciplined 
software processes. Be able to describe the SW-CMM and IDEAL models.
Understand the importance of change and configuration management.
Know the three 
basic components of change control—request control, change control, and release control—
and how they contribute to security. Explain how configuration management controls the 
versions of software used in an organization.
Understand the importance of testing.
Software testing should be designed as part of the 
development process. Testing should be used as a management tool to improve the design, 
development, and production processes.
Written Lab
1.
What is the main purpose of a primary key in a database table?
2.
What is polyinstantiation?
3.
Explain the difference between static and dynamic analysis of application code.
4.
How far backward does the waterfall model allow developers to travel when a develop-
ment flaw is discovered?

---

Review Questions 
911
Review Questions
1.
Which one of the following is 
not
a component of the DevOps model?
A.
Information security
B.
Software development
C.
Quality assurance
D.
IT operations
2.
Bob is developing a software application and has a field where users may enter a date. He 
wants to ensure that the values provided by the users are accurate dates to prevent security 
issues. What technique should Bob use?