A software development manager is taking over an existing software development project. The
team currently suffers from poor communication due to a long delay between requirements
documentation and feature delivery. This gap is resulting in an above average number of securityrelated bugs making it into production. Which of the following development methodologies is the
team MOST likely using now?

A security manager has received the following email from the Chief Financial Officer (CFO):
“While I am concerned about the security of the proprietary financial data in our ERP application,
we have had a lot of turnover in the accounting group and I am having a difficult time meeting our
monthly performance targets. As things currently stand, we do not allow employees to work from
home but this is something I am willing to allow so we can get back on track. What should we do
first to securely enable this capability for my group?”
Based on the information provided, which of the following would be the MOST appropriate
response to the CFO?