1. What does N I S T’s Secure Software Development Framework (SSDF) provide to organizations?
Difficulty: MediumType: MCQTopic: SupplyChain
SSDF describes core practices such as preparing the organization, protecting code and tools, producing well-secured software, and responding to vulnerabilities. It is outcome-based and fits into any life cycle model. You map your processes to these outcomes to raise assurance. This framing is common in interviews because it shows you can align engineering with policy. (Source: NIST SP 800-218 overview.)
Example code
Examples: policy for code signing; hardened CI; documented build provenance; vuln response playbook