CompTIA Security+ SY0-701 Practice Question
What is the primary importance of incorporating security requirements into the procurement process for new IT systems and services?
To avoid the need for any further security assessments or monitoring once the system is deployed
To merely comply with external audit requirements, with minimal focus on actual security postures
To ensure security controls are integrated into the design and contractual obligations from the beginning, reducing overall risks
To transfer the responsibility for security from the organization to the external vendor