フリー問題

問題文

A regulator asks the company to show where a stated requirement about retaining access records is realized in the delivered system. The team can demonstrate the feature but cannot connect it to the requirement or to the test that proved it. What is absent?

選択肢

1. The evidence chain needs requirement traceability procedures alongside the granular certification.
2. The evidence chain needs safeguard rollout obligations alongside the granular certification.
3. The evidence chain needs threat ranking rules alongside the granular certification.
4. The evidence chain needs penetration engagement controls alongside the granular certification.