The county wants stronger software configuration management for its shared code repositories. Which control set best addresses repository security?
Select an answer to reveal the explanation.
Short Explanation
Think of the repo like the city's deed vault—not everyone gets a key, and every change leaves a paper trail. Access control, branch protection, and audit logs keep municipal code from getting rewritten in the dark. Configuration management without those controls is just hope.
Full Explanation
Secure code repositories implement least-privilege access, branch protection rules that constrain who can merge to critical branches, and audit logging of changes. These practices support integrity, accountability, and software configuration management. Weak repository controls undermine later SDLC security gates.