A.Staff require additional training in order to perform cede review.

B.Some of the developers are located in another country.

C.The organization has not reviewed the components for known exploits.

D.Open-source components were integrated during development.

A.Interviews with knowledgeable users

B.Review of program documentation

C.Use of test transactions

D.Review of source code

A.reduced.

B.unchanged.

C.increased.

D.eliminated.

A.a capability model.

B.industry benchmarks

C.organizational goals.

D.key performance indicators (KPls).

A.preventing password cracking and replay attacks

B.facilitating the exchange of public key infrastructure (PKI) certificates

C.enabling the use of stronger encryption keys

D.providing end-to-end encryption.