4. As part of the COVID-19 policy, the government has to perform contact tracing. Contact tracing is used to identify close contact of COVID-19 patients and perform COVID-19 tests to identify how far the virus has spread from a single person. For enabling contact tracing, the government mandated a policy to all venues, public and private, to keep record of all visitors that visited the venues. A mobile phone application was developed to digitize the process of keeping of records of visitors. Using the mobile application, users will enter their name, mobile phone number, time and venue visited. The application will send these data to servers for record keeping. When a user is infected with COVID-19, the government can use the data recorded in the server to trace where the user had visited and lists of peoples that were in the same venue at that time. a. b. List The FOUR (4) critical business functions of the OWASP Software Security Assurance Maturity Model (SAMM). Explain the following MITRE ATT&CK tactics, i. ii. Persistence. Credential Access. iii. Lateral Movement. [4 marks] [2 marks] [2 marks] [2 marks]