Exam 10: Implementing Information Security

The networks layer of the bull's-eye is the outermost ring of the bull's eye.

Tasks or action steps that come after the task at hand are called ____________________.

A(n)____________________ is a completed document or program module that can either serve as the beginning point for a later task or become an element in the finished project.

One of the oldest models of change is the ____________________ change model.

____ is a simple planning tool.

The tasks or action steps that come before the specific task at hand are called successors._________________________

What can the organization do by managing the process of change?

The security systems implementation life cycle is a process for collecting information about an organization's objectives,its technical architecture,and its information security environment._________________________

Technology ____ guides how frequently technical systems are updated,and how technical updates are approved and funded.

The goal of the ____ is to resolve any pending issues,critique the overall effort of the project,and draw conclusions about how to improve the process for the future.

The level of resistance to ____________________ impacts the ease with which an organization is able to implement the procedural and managerial changes.

Weak management support,with overly delegated responsibility and no champion,sentences the project to almost-certain failure.

Project ____________________ describes the amount of time and effort-hours needed to deliver the planned features and quality level of the project deliverables.

A cybernetic loop ensures that progress is measured periodically._________________________

A(n)____________________ implementation is the most common conversion strategy and involves a measured rollout of the planned system with a part of the whole being brought out and disseminated across an organization before the next piece is implemented.

The size of the organization and the normal conduct of business may preclude a single large training program on new security procedures or technologies.

Public organizations often have "____" to spend all their remaining funds before the end of the fiscal year.

Each organization has to determine its own project management methodology for IT and information security projects.

Management should coordinate the organization's information security vision and objectives with the communities of ____________________ involved in the execution of the plan.

A(n)____,typically prepared in the analysis phase of the SecSDLC,must be reviewed and verified prior to the development of the project plan.