Which secure coding best practice says to assume all incoming data should be considered untrusted and should be validated to ensure the system only accepts valid data?

The software security team has been tasked with assessing a document management application that has been in use for many years and developing a plan to ensure it complies with organizational policies. Which post-release deliverable is being described?

Company leadership has discovered an untapped revenue stream within its customer base and wants to meet

with IT to share its vision for the future and determine whether to move forward.

Which phase of the software development lifecycle (SDLC) is being described?

Which secure coding best practice says to use well-vetted algorithms to ensure that the application uses random identifiers, that identifiers are appropriately restricted to the application, and that user processes are fully terminated on logout?

A recent security review has identified an aging credential recovery/forgotten password component that

emails temporary passwords to users who claim to have forgotten their application password.

How should the organization remediate this vulnerability?