Facilities wants to buy a new badge access system. What asset-management step should happen in acquisition?
Select an answer to reveal the explanation.
Short Explanation
Before the city writes a check for a new badge system, security should review what it must do—and refuse to do. Lowest-bidder speed without requirements is how you inherit weak doors and weaker software.
Full Explanation
Proper hardware and software asset management includes security requirements during acquisition and procurement so purchased systems meet organizational controls before commitment. Skipping review because a system is 'just badges' ignores cyber and physical integration risks. Defining needs only after a breach is reactive. Embedding security review in municipal procurement aligns with Domain 4.2.