OWASP - The Testing framework Phases

Question 1

Phase 1:

Answer 1

Before development begins – This phase focuses on defining the SDLC, revieing policies and standards, and developing measurement and metrics criteria for the project and ensure traceability.

Question 2

Phase 2:

Answer 2

During definition and design – This phase focuses on reviewing security requirements, reviewing design and architecture, creating and reviewing Unified Modeling Language (UML) models, and creating and reviewing threat models.

Question 3

Phase 3:

Answer 3

During development – This phase focuses on code walkthrough and code reviews.

Question 4

Phase 4:

Answer 4

During deployment – This phase focuses on application penetration testing and configuration management testing.

Question 5

Phase 5:

Answer 5

Maintenance and Operations – This phase focuses on conducting operational management reviews, conducting periodic health checks, and ensuring change verification.