Communication & Conflict Resolution Flashcards

A client's project manager and the security consultant have conflicting views on project timeline. Which negotiation tactic is MOST constructive?

Answer: Identify the underlying interests behind each position and explore options that satisfy both

Interest-based negotiation (Fisher & Ury's principled negotiation) focuses on underlying needs rather than stated positions to find mutually beneficial solutions.

During a physical security walkthrough, an employee makes an offhand comment suggesting insider knowledge of a recent breach. Which communication response is MOST appropriate?

Answer: Note the comment, probe gently with open-ended questions, and report to the appropriate contact per the engagement rules

Consultants must follow defined protocols for potential insider threat indicators—document, probe carefully, and escalate through proper channels.

A security consultant must communicate the same risk finding to both a technical IT team and a C-suite audience. The MOST effective approach is to:

Answer: Tailor the message—technical details for IT, business impact framing for the C-suite

Effective communication requires audience adaptation—technical audiences need implementation details while executives need risk and business context.

What is 'principled negotiation' as defined by Fisher and Ury, and why is it relevant to security consulting?

Answer: A method focusing on interests rather than positions, objective criteria, and mutual gains—useful for resolving client-consultant disputes

Principled negotiation separates people from problems, focuses on interests, and uses objective criteria—making it highly effective for consultant-client conflict resolution.

A security consultant identifies that poor interdepartmental communication is contributing to security vulnerabilities. The BEST recommendation is to:

Answer: Recommend formal communication protocols, cross-functional security committees, and regular reporting cadences

Structural communication improvements—formal protocols, committees, and reporting—address the root cause of communication-driven security gaps.

During a security assessment interview, silence from the interviewee after a question is BEST handled by:

Answer: Allowing the silence to continue briefly, as it often prompts the interviewee to provide more information

Comfortable silence is a powerful interview technique—interviewees often fill silence with additional, sometimes critical, information.

A conflict arises between a security consultant's recommendation to segment a network and the operations team's concern about performance degradation. The MOST appropriate resolution is to:

Answer: Engage both security and operations in a collaborative design session to achieve segmentation with acceptable performance trade-offs

Collaborative cross-functional design sessions integrate security requirements with operational constraints, producing solutions both teams can support.