CISSP — Security Operations and Software Development Security flashcards
10 of 79 cards free to study here · 2 topics · the whole deck is built into Willys
CISSP domains 7 and 8: evidence rules and chain of custody, monitoring, incident steps in order, change and patch control, backups and recovery sites, DR tests by disruption, safety, SDLC and DevSecOps, CMM and SAMM, OWASP-style flaws, secure coding and acquiring software.
Learn deck · part of ISC2 CISSP · written against: CISSP exam outline (domains effective April 2024). Updated 2026-10-10.
Study the free sample
10 cards from the deck as they are. Flip, rate yourself, filter by topic; your progress stays in this browser.
Tap the card or press Space to flip
The 10 sample cards as a list
-
Evidence suggests an employee committed a crime using a company laptop. Who should the security manager involve BEFORE taking the investigation further?Legal counsel (with senior management and HR), who decide how evidence must be handled and whether to involve law enforcement.Security Operations › Investigations and Evidence
-
What are the main trade-offs of bringing law enforcement into a corporate incident?Gains: legal powers such as warrants and the chance of prosecution. Costs: possible publicity, loss of control over the investigation's pace and scope, and systems that may be held as evidence.Security Operations › Investigations and Evidence
-
What three qualities make evidence admissible?It must be relevant (it helps establish a fact), material (that fact matters to the case) and competent (legally and reliably obtained).Security Operations › Investigations and Evidence
-
How do real, documentary and testimonial evidence differ?Real evidence is a physical object such as a seized drive; documentary evidence is written or recorded material, including logs and computer output; testimonial evidence is what a witness states.Security Operations › Investigations and Evidence
-
What does the best evidence rule prefer, and how is it satisfied for digital data?It prefers the original document over copies when the document's contents are in question. For digital data, an accurate bit-for-bit copy verified by hash is generally accepted.Security Operations › Investigations and Evidence
-
At which SDLC phase should security first be involved?Initiation and requirements, when security requirements are defined alongside functional ones. Fixing a flaw grows more expensive with each later phase.Software Development Security › SDLC and DevSecOps
-
What does shift left mean in DevSecOps?Moving security activities earlier in development — threat modelling, code scanning and dependency checks run in the developer's workflow and pipeline, not just before release.Software Development Security › SDLC and DevSecOps
-
Which security checks belong in a CI/CD pipeline?Static analysis, dependency (composition) scanning, secrets detection and infrastructure-as-code scanning, with signed build artefacts and gated approval for production.Software Development Security › SDLC and DevSecOps
-
A developer committed a cloud API key to a repository and deleted it in the next commit. Is the risk gone?No — the key remains in the repository's history and any clones. Revoke and rotate it, then move secrets into a vault.Software Development Security › SDLC and DevSecOps
-
What distinguishes the spiral development model?Each iteration includes an explicit risk analysis before the next prototype is built, making it suited to large, high-risk projects.Software Development Security › SDLC and DevSecOps
Unlock the whole deck
You are studying a free 10-card sample. All 79 cards of CISSP — Security Operations and Software Development Security, the other 5 ISC2 CISSP decks, and spaced-repetition scheduling are built into Willys. 14-day free trial, then $14.99 a year.
In Willys, tap Exam Library at the top of your Decks (or Browse Exam Library… under the + button), find the exam on its shelf or by search, tick it and tap Add.
More ISC2 CISSP decks
← All ISC2 CISSP decks, with the study guide and topic outline.
About these cards
Review status: Second-reader reviewed, with corrections applied.
Checked against:
- ISC2 CISSP exam outline (domains effective April 2024) — topic outline only; no text copied
These are independent study notes written for Willys. They are not official exam material, may contain mistakes, and are no substitute for your course, your teacher or the exam owner's own publications. Found an error? Tell us — corrections ship as a new version of the deck.
CISSP® is a registered mark of ISC2, Inc. This product is not affiliated with or endorsed by ISC2.
Use of these pages is covered by our Terms of Use.