Reference no: EM13338074

Original and substantiated responses. DO NOT Plagiarize. Cite source. Use no more than 5% citations. Each answer to each question MUST be one paragraph in length, with a minimum of 5 SENTENCES in each paragraph response. Be sure to write at a Master's level, using proper US English, punctuation and sentence structure.

1. The essence of software assurance lies in following good software engineering procedure. Specifically, how does that procedure aid security?
2. Defects cause vulnerabilities, but are defects vulnerabilities? If not, why not? Give an example.
3. What is the role of the configuration manager in sub-contractor work? Why is it important to security?
4. SQA and configuration management are the cornerstones of defect prevention. Why is that the case? What does each process contribute?
5. Why is defense in depth important in application and system software security? What does it provide and how easy is it to obtain? What are some of the obstacles?
6. The essence of operational assurance is the presence of reviews and inspections. How do these processes ensure operational assurance?
7. The purpose of operational analysis is to support decision making about how to react to problems. How exactly does operational assurance do that and what is the primary element that underlies the process?
8. The conclusion of the problem-resolution process must be authorized. Why is it important to do that? What would be the consequences if it were not?
9. Policies are essential in establishing and configuring the reference monitoring function. Why is that true? What would happen if a policy were not available to guide reference monitoring?
10. The occurrence of incidents should be reported through a well established and standard process. What is likely to happen if the process was not standardized?