8.31--CAESARII Version Daily Topics

Thread Content

8.31--In the CAESARII version, those who answer the daily questions correctly receive 10 wealth points, while those who get them wrong receive 3 wealth points. A certain department needs to develop a business software for its operational requirements; when discussing the funds to be allocated for ensuring the security of this software, disagreements arose between the development team and the information center. The development team believes that no investment is necessary during the development phase, and that it is cheaper to address any security issues that arise after the software is developed rather than investing in security measures from the beginning； The Information Center believes that investment should be made during the software development phase, as resolving issues later on would be too costly. The two sides are at odds on this matter. As an information security expert, which statement regarding investment in software development security is correct? A. The Information Center’s view is correct; addressing software security issues during the software development stage results in lower overall costs compared to dealing with them after the software goes into operation. B. The software development team’s view is correct, as identifying problems after the software is developed makes it easier to determine the issues and arrange for code revisions, thus reducing costs. C. Both views are correct; it is necessary to analyze the specific situation to decide whether it is cheaper to address issues during development or after the software is launched. D. Both views are incorrect; software security issues can be addressed at any time, and the cost of resolving them remains the same regardless of when it is done