How is capable performance judged?
What will be an ideal response?
Capable performance is always judged based on assessment of the performance of a defined set of security practices. Each practice should have a purpose and consist of a set of base activities that are considered essential to achieve its purpose. That purpose is the reason for undertaking the practice in the first place. The practices that characterize each security process represent the unique, functional attributes of that process. These practices have to be present, even if their performance is not systematic.
You might also like to view...
The program specification is a clear statement of the goals and objectives of the project
Indicate whether the statement is true or false
Which is an incorrect guideline for modular programming?
A) Keep each module to a manageable size. B) Pay particular attention to the critical interfaces. C) Maximize the number of modules the user needs to modify when making changes. D) Maintain the hierarchical relationships set up in the top-down phases.