A city permitting portal went live last quarter, yet new dependency CVEs keep appearing. What Domain 8 practice should continue as part of SDLC sustainment?
Select an answer to reveal the explanation.
Short Explanation
Go-live is not the finish line—it's the start of keeping the car on the road. Patching vulns and updating dependencies after launch is normal sustainment, not optional busywork. Civic apps that freeze forever just age into soft targets.
Full Explanation
Security responsibilities persist after deployment in the operations and maintenance phases of the SDLC. Vulnerability management, dependency updates, and configuration hygiene remain necessary while the application serves the public. Treating go-live as the end of secure development leaves residual risk unmanaged.