Exam 10: Implementing Information Security

Technology __________ guides how frequently technical systems are updated, and how technical updates are approved and funded.

The RFP determines the impact that a specific technology or approach can have on the organization's information assets and what it may cost. _________________________

Many public organizations must spend all budgeted funds within the fiscal year-otherwise, the subsequent year's budget is __________.

The effective use of a DMZ is one of the primary methods of securing an organization's networks.

A(n) __________ is used to justify that the project will be reviewed and verified prior to the development of the project plan.

A task or subtask becomes a(n) action step when it can be completed by one individual or skill set and when it includes a single deliverable. _________________________

A proven method for prioritizing a program of complex change is the bull's-eye method. _________________________

One of the oldest models of change is the Lewin change model, which consists of three stages: unfreezing, ____________________, and refreezing.

The __________ level of the bull's-eye model establishes the ground rules for the use of all systems and describes what is appropriate and what is inappropriate; it enables all other information security components to function correctly.

A direct changeover is also known as going "fast turnkey." _________________________

"Unfreezing" in the Lewin change model involves thawing hard-and-fast habits and established procedures.

The level of resistance to ____________________ impacts the ease with which an organization is able to implement procedural and managerial changes.

The first step in the work breakdown structure (WBS) approach encompasses activities, but not deliverables.

Once a project is underway, it is managed to using a process known as a negative ____________________ loop.

In systems development, JAD (____________________ development) means getting key representatives of user groups to serve as members of the development process.

A __________ is usually the best approach to security project implementation.

A(n) ____________________ is a specific point in the project plan when a task that has a noticeable impact on the plan's progress is complete.

An ideal organization fosters resilience to change. _________________________

Every organization needs to develop an information security department or program of its own.

Once a project is underway, it is managed using a process known as gap analysis, which ensures that progress is measured periodically. _________________________