Cis 560 DB 9 - Discuss the purpose of the security development life cycle

Cis 560 DB 9

"Testing Access Control"

• Discuss the purpose of the security development life cycle and how it is used for testing security systems. Using the Internet, find two to three tools that could be used to conduct a vulnerability assessment. Please include the web URL and share with your classmates. Are paid tools more effective than open-source tools? How does someone determine the best tool to use for an assessment? Justify your answers.

Additional post options: Should a company conduct their own pentest or should they pay to have an outside company conduct the tests? Justify your answer.