Exam 10: Implementing Information Security

Regardless of where in the budget information security items are located,monetary ____________________ determine what can (and cannot)be accomplished.

A ____ is usually the best approach to security project implementation.

A proven method for prioritizing a program of complex change is the bull's-eye method._________________________

Tasks or action steps that come after the task at hand are called ____.

The primary drawback to the direct changeover approach is that if the new system fails or needs modification,users may be without services while the system's bugs are worked out.

Technology ____________________ is a complex process that organizations use to manage the affects and costs of technology implementation,innovation,and obsolescence.

Project managers can reduce resistance to change by involving employees in the project plan.In systems development,this is referred to as ____.

Every organization needs to develop an information security department or program of its own.

Planners need to estimate the effort required to complete each task,subtask,or action step.

The parallel implementation works well when an isolated group can serve as the "guinea pig," which prevents any problems with the new system from dramatically interfering with the performance of the organization as a whole._________________________

DMZ is the primary way to secure an organization's networks.

The ____ involves collecting information about an organization's objectives,its technical architecture,and its information security environment.

In the ____ process,measured results are compared to expected results.

The ____ methodology has been used by many organizations,requires that issues be addressed from the general to the specific,and that the focus be on systematic solutions instead of individual problems.

The RFP determines the impact that a specific technology or approach can have on the organization's information assets and what it may cost._________________________

In the early stages of planning,the project planner should attempt to specify completion dates only for major employees within the project._________________________

ERP stands for enterprise ____________________ planning.

The tasks or action steps that come before the specific task at hand are called ____________________.

What are the major steps in executing the project plan?

Corrective action decisions are usually expressed in terms of trade-offs._________________________