Custom fee-calculator code for city building permits is about to release. What should security assessment include before production?
Select an answer to reveal the explanation.
Short Explanation
Money math in permit fees is still code—and code can hide injection, auth bugs, and logic abuse. Review and security-test it before go-live. Skipping, waiting for a bounty, or only checking fonts leaves the door unlocked.
Full Explanation
Code review and testing are core control-assessment activities for custom applications. A municipal fee calculator handles financial logic and user input, so security flaws can enable fraud or data exposure. Deferring all scrutiny, relying only on post-release bounty hunters, or restricting checks to cosmetic UI traits fails to exercise security controls before production.