Which of the following phases of a system development life-cycle is most concerned with maintaining proper
authentication of users and processes to ensure appropriate access control decisions?

A.
Development/acquisition

B.
Implementation

C.
Operation/Maintenance

D.
Initiation

Explanation:
In the Operation/maintenance phase the system is used and cared for. Proper authentication of the users and
processes must be developed in this phase.
Incorrect Answers:
A: In the Acquisition/development the new system is either created or purchased. The main concern of this
phase is not the authentication of users and processes.
B: In the implementation phase the new system is installed into production environment. The main concern of
this phase is not the authentication of users and processes.
D: In the Initiation phase the need for a new system is defined. Authentication of users and processes is not a
major concern of this phase.

Conrad, Eric, Seth Misenar and Joshua Feldman, CISSP Study Guide, 2nd Edition, Syngress, Waltham, 2012,
p. 1087