What is a good way for a Scrum Team to ensure that security concerns are addressed and transparent?

A. Add Security Sprints to resolve security concerns when needed
B. Have the Scrum Team create Product Backlog items for each concern and/or add security concerns to the definition of “Done”
C. Create a separate backlog for security items and only work on the items when a specialist becomes available
D. Delegate the work to an external team

Correct Answer: B

If security concerns are added to the definition of “Done” the Scrum team has a check build into the development process. Each Product Backlog item that is delivered has to adhere to the definition of “Done” so this is a good way to make sure the concerns are addressed and transparent.