What does security compliance in readiness criteria entail?

• A. Security compliance is ignored.
• B. Has no encryption.
• C. No user data handling.
• D. Meets defined security requirements and mitigates vulnerabilities.

Answer: (D)

Security compliance in readiness criteria means ensuring the system meets defined security requirements and actively addresses vulnerabilities before going live. It involves putting in place protections such as encryption where needed, access controls, secure configuration, logging, and ongoing vulnerability management so the product can be trusted in production. It isn’t about ignoring security or avoiding data handling; it’s about verifying that formal security standards are satisfied and risks are mitigated. This is why the best choice describes both meeting defined security requirements and mitigating vulnerabilities, capturing both compliance and proactive risk reduction. The other statements imply skipping or weakening security measures, which would not meet readiness standards.