Which element should be included in annual secure coding training for developers?

• A. Understanding how sensitive data is handled in memory and secure coding guidelines
• B. Only syntax and style guidelines
• C. Marketing and business strategy
• D. Network topology diagrams

Answer: (A)

Secure coding training should center on how sensitive data is managed in memory and on applying secure coding guidelines. Understanding how data flows, where it lives in memory, how it’s protected, and how to securely erase it helps prevent leaks and memory-related vulnerabilities. It also equips developers with practical rules for writing secure code—proper input validation, safe error handling, correct use of cryptography, and careful management of credentials and sessions. The other topics don’t address these security-critical coding aspects: focusing only on syntax and style guidelines misses how data is safeguarded in memory; marketing and business strategy fall outside the development security focus; and network topology diagrams pertain to infrastructure rather than secure coding practices.