To integrate security into system development life cycle (SDLC) processes, an organization MUST ensure that security:
A . is represented on the configuration control board.
B . performance metrics have been met.
C . roles and responsibilities have been defined.
D . is a prerequisite for completion of major phases.
Answer: D