Which of the following topics would most likely be included within an organization's SDLC?

Branch protection requirements are a core component of a secure Software Development Life Cycle (SDLC). They define rules for code repositories, such as requiring pull request reviews, status checks, and restrictions on direct pushes to critical branches (like main or master). This ensures code quality, prevents unauthorized changes, and integrates security early in the development process. Service-level agreements (SLAs) are external contracts for service performance, not internal SDLC components. Information security policy is a broader organizational document, while penetration testing methodology is a specific security assessment technique, not an overarching SDLC topic itself, though penetration testing is an activity within a secure SDLC.