Question 70

Attestation

Attestation refers to the act of providing evidence or proof to a customer that software developers have been trained in secure coding practices. This process helps assure clients that their software is developed with security in mind.

A) Assurance

Assurance involves providing confidence to customers about the reliability or safety of a product or service. However, it does not specifically indicate a formal act of proving training in secure coding, making it less precise than attestation.

B) Contract

A contract is a legal agreement between parties that outlines obligations and expectations. While it may include clauses related to secure coding practices, it does not serve as direct proof of developer training or capabilities.

C) Due diligence

Due diligence refers to the careful evaluation and investigation of a company or product before engagement. Although it may involve assessing developer qualifications, it does not specifically represent the act of proving training in secure coding.

D) Attestation

Attestation is the formal declaration that confirms the training and qualifications of software developers in secure coding practices. This option directly aligns with the question’s requirement to prove such training to a customer.

Conclusion

Attestation is the most accurate answer as it directly addresses the need for formal proof of training in secure coding for software developers. Other options, while related to the broader topic of assurance and evaluation, do not specifically fulfill the requirement of proving developer training. Thus, attestation stands out as the definitive choice.