CRISC Certified in Risk and Information Systems Control – Question823

Controls should be defined during the design phase of system development because:

A.
technical specifications are defined during this phase.
B. structured programming techniques require that controls be designed before coding begins.
C. its more cost-effective to determine controls in the early design phase.
D. structured analysis techniques exclude identification of controls.

Correct Answer: B