CSL CSL Security Budgeting & Program Management 2

Question 1

Which project management methodology is most commonly adapted for managing cybersecurity programs with evolving requirements?

Accepted Answer

Agile/iterative methodology with sprint-based planning

Answer

Agile methodology accommodates the dynamic and evolving nature of cybersecurity threats and organizational priorities better than rigid sequential approaches.

Question 2

What is the purpose of a security program roadmap in a CISO's strategic plan?

Accepted Answer

To visualize the multi-year journey from current security posture to target state

Answer

A security roadmap communicates the phased plan for advancing security capabilities over time, helping align stakeholders on priorities and resource needs.

Question 3

Which KPI best indicates that a vulnerability management program is operating effectively?

Accepted Answer

Mean time to remediate (MTTR) critical vulnerabilities within SLA targets

Answer

MTTR for critical vulnerabilities measures actual risk reduction speed, directly demonstrating whether the vulnerability management program is closing exposure windows on time.

Question 4

A cybersecurity leader is managing a large-scale security tool consolidation project. What is the greatest risk to project success?

Accepted Answer

Loss of security coverage during the transition period between old and new tools

Answer

Tool consolidation projects risk creating security coverage gaps if old tools are decommissioned before new tools are fully operational and validated.

Question 5

What is the primary benefit of aligning the cybersecurity program to a recognized framework such as NIST CSF?

Accepted Answer

A common language and structure for communicating security posture to stakeholders

Answer

NIST CSF provides a common vocabulary and structure that enables consistent communication about security capabilities, gaps, and investments with business and technical stakeholders.

(CSL) Cybersecurity Leadership Certification Practice Test

(CSL) Cybersecurity Leadership Certification Practice Test

CSL CSL Security Budgeting & Program Management 2