During an audit of a financial services firm\'s information security program, an auditor discovers a critical, unpatched flaw within a proprietary trading platform\'s authentication module. This vulnerability, which allows for privilege escalation, was identified through an internal penetration test conducted after the platform\'s initial deployment. The organization\'s incident response plan has procedures for handling detected vulnerabilities, but the audit team is specifically examining the controls in place to *prevent* such flaws from being introduced during the software development lifecycle. Which ISO 27002:2022 control would be most directly applicable for assessing the organization\'s proactive measures against this type of vulnerability?