Reference no: EM133513206

Secure software development is all about ensuring security is built into software right at the beginning and not treated as an afterthought, and as a plugin at a later stage of development or after the software is released. This has been the practice and as a security professionals, one of
your primary responsibilities is to prevent that from happening. In this scenario, you have been hired as a security consultant by a small software development company (XYZ LLC.) to work with developers on a web-based system for XYZ's HR department. The team uses Agile-scrum for their software development projects. During your first meeting with the team, you noticed the team is very knowledgeable on the Software Development Lifecycle (SDLC), obviously because they are software developers. However, you realized they do not know much about secure development of software. They do not know how to incorporate security in software right from the beginning of development.

Describe how the team through each phase of the SDLC and educate them on the need to embed security into each phase of the SDLC in an agile environment. This is a web-based application for XYZ's HR department, what specific security measures would be advised to the team to embed in each phase of the SDLC for this particular system. Also, why are these specific security measures important and how they could be embedded in the application?