Developers began using unapproved cloud scanners that upload municipal source to third-party tenants. What should leadership do first for tooling governance?
Select an answer to reveal the explanation.
Short Explanation
Free scanners that vacuum city source into someone else's cloud are not a bargain. Leadership needs an approved toolbox and a clear ban on shadow tools that walk off with code. Governance beats "move fast and leak the repo."
Full Explanation
Development ecosystem tools can become data-exfiltration or integrity risks if they are unvetted. Organizations should define approved security and analysis tool sets, evaluate vendor data handling, and prohibit unsanctioned scanners. Tooling governance is a Domain 8 control over how software risk is assessed.