Exam 5: Developing the Security Program

____________________ is a phenomenon in which the project manager spends more time documenting project tasks,collecting performance measurements,recording project task information,and updating project completion forecasts than in accomplishing meaningful project work.

The information security ____________________ is usually brought in when the organization makes the decision to outsource one or more aspects of its security program.

What is the security education,training,and awareness program? Describe how the program aims to enhance security.

What is the Chief Information Security Office primarily responsible for?

An organization's information security program refers to the entire set of activities,resources,personnel,and technologies used by an organization to manage the risks to the information  _______ of the organization.

What is the purpose of a security awareness program?  What advantage does an awareness program have for the InfoSec program?

A SETA program consists of three elements: security education,security training,and which of the following?.

The work breakdown structure (WBS)can only be prepared with a complex specialized desktop PC application.

The purpose of SETA is to enhance security in all but which of the following ways? 

What minimum attributes for project tasks does the WBS document?

Which of the following variables is the most influential in determining how to structure an information security program? 

Advanced technical training can be selected or developed based on which of the following? 

What is the role of help desk personnel in the InfoSec team?

Which security functions are normally performed by IT groups outside the InfoSec area of management control?

Explain the conflict between the goals and objectives of the CIO and the CISO.

__________ is a simple project management planning tool.

Which of the following is the most cost-effective method for disseminating security information and news to employees? 

In larger organizations,responsible for some aspect of information security; in smaller organizations,this title may be assigned to the only or senior security administrator.

Which of the following functions includes identifying the sources of risk and may include offering advice on controls that can reduce risk? 

Which of the following would be responsible for configuring firewalls and IDPSs,implementing security software,and diagnosing and troubleshooting problems?