Security Reauthorizations are conducted during what phase of the SDLC?

• A. Operations/Maintenance
• B. Design
• C. Planning
• D. Disposal

Answer: (A)

Security reauthorizations happen while the system is in operation and being maintained. Once a system is live, its security posture can change due to patches, configuration updates, new threats, or changes in environment. Reauthorization—often tied to periodic updates or after significant changes—reassesses the implemented controls to confirm they still meet risk and security requirements. This fits the ongoing, in-production activities of the operations/maintenance phase, supported by continuous monitoring. Planning, design, and disposal are earlier or end-of-life stages and don’t cover ongoing authorization of an active system.