A security analyst has been asked to perform a review of an organization’s software development lifecycle. The analyst reports that the lifecycle does not contain a
phase in which team members evaluate and provide critical feedback of another developer’s code. Which of the following assessment techniques is BEST
described in the analyst’s report?

A.
Architecture evaluation

B.
Baseline reporting

C.
Whitebox testing

D.
Peer review