Software Security Requirements

Correct Answer: Encryption

Encryption is essential for protecting sensitive information, as it ensures that it cannot be read by unauthorized individuals. Other options may be appropriate for other scenarios or as part of a broader security architecture but do not directly address protecting such information.

Correct Answer: Parameterized queries

Parameterized queries help secure an application against SQL injection attacks because they separate user data from the SQL command, making it difficult for attackers to inject malicious code. Other options, while possibly useful for other security concerns, do not specifically address SQL injection.

Correct Answer: Implement digital signatures for transactions.

Implementing digital signatures for transactions is the most vital security requirement to ensure data integrity in financial transactions within an ERP system's finance module. Digital signatures provide a cryptographic mechanism to verify the authenticity and integrity of financial data. They guarantee that the transaction data has not been tampered with during transmission or storage, and that it originated from a legitimate source. This is crucial in financial systems to prevent fraud, unauthorized modifications, and ensure non-repudiation. Digital signatures use asymmetric encryption, which is more secure than weak encryption algorithms. They also address the integrity aspect more directly than multi-factor authentication or password storage methods. Unlike the other options, which either compromise security or provide insufficient protection, digital signatures specifically target the integrity requirement, making them the most appropriate choice for safeguarding financial transactions in an ERP system.