Before accepting a vendor-built citizen portal, the city must confirm security requirements were actually met. Which lifecycle activity does that describe?
Select an answer to reveal the explanation.
Short Explanation
Do not take the vendor's word that the locks work—check. Verification and validation are the "show me" steps before you accept the portal. Skipping them is buying a mystery box.
Full Explanation
Verification and validation confirm that specified security requirements were implemented correctly and that the system meets stakeholder security needs before acceptance. In the IS lifecycle, V&V gates reduce the risk of deploying noncompliant vendor portals. Acceptance without V&V leaves residual control gaps undocumented.