Mixed Deck — All CSPM Topics Flashcards

A CSPM professional facilitates a tabletop exercise. The primary goal of this activity is to:

Answer: Simulate a crisis scenario to identify gaps in plans and team readiness without real-world disruption

Tabletop exercises use discussion-based simulations of security incidents to test plans, identify weaknesses in response procedures, and improve team coordination without impacting live systems.

What is the first step in security project planning?

Answer: Define project scope and objectives

The first step in security project planning is to define the project scope and objectives. Before any resources can be allocated or risks identified, it's imperative to clearly understand what the project aims to achieve and what its boundaries are. This foundational step ensures that all subsequent planning activities are aligned with the overarching goals and requirements of the security initiative.

What does 'chain of custody' ensure in a security incident investigation?

Answer: That evidence is properly collected, documented, and protected from tampering

Chain of custody documents who handled evidence, when, and how, ensuring its integrity and admissibility in legal proceedings.

What is the primary responsibility of a security project manager?

Answer: To ensure security systems are deployed according to project timelines and budgets

A security project manager's primary responsibility is to oversee the entire lifecycle of a security system deployment. This includes planning, executing, and closing projects, ensuring that all security solutions are implemented on time, within budget, and meet the specified requirements and quality standards. They are crucial for successful and efficient project delivery.

Which stakeholder engagement strategy is MOST effective for CSPM professionals leading initiatives?

Answer: Identify stakeholders early, understand their interests, and maintain regular communication

Early stakeholder identification, understanding their interests and concerns, and maintaining regular communication builds support, prevents surprises, and ensures diverse perspectives inform decision-making throughout the initiative.

What is a tabletop exercise in the context of incident response?

Answer: A discussion-based exercise where participants walk through a hypothetical incident scenario

A tabletop exercise is a low-cost, discussion-based drill where key stakeholders verbally walk through an incident scenario to identify gaps in the response plan without affecting real systems.

Which artifact captures unresolved security risks that the operations team must manage after project closure?

Answer: Risk register transition document

A risk register transition document passes outstanding risks and their mitigation plans to the operational team responsible for ongoing management.

Which of the following is a key component of the administrative closure process in a security project?

Answer: Confirming all contracts and procurement activities are closed

Administrative closure includes verifying that all procurement contracts are settled, payments finalized, and vendor obligations discharged.

A security project has a To-Complete Performance Index (TCPI) of 1.25. What does this mean for the project team?

Answer: The team must be 25% more efficient than originally planned for the rest of the project

A TCPI of 1.25 means the team must achieve 125% efficiency on remaining work to meet the original budget, indicating significant cost recovery challenge.

What does MTTR stand for in incident response metrics?

Answer: Mean Time to Recover

MTTR stands for Mean Time to Recover (or Resolve), measuring the average time from incident detection to full system restoration.

What type of risk response strategy involves purchasing cyber insurance to offset potential financial losses?

Answer: Risk transfer

Risk transfer shifts the financial burden of a risk to a third party, such as an insurer, rather than eliminating or reducing the underlying threat.

What is the MAIN purpose of a security project's daily stand-up during the execution phase?

Answer: To identify blockers, synchronize team activities, and track short-term progress

Daily stand-ups are brief synchronization meetings to surface blockers, align on priorities, and ensure team members are on track with short-term tasks.

Why is stakeholder engagement important in project planning?

Answer: It improves communication and satisfaction

Stakeholder engagement is crucial in project planning because it fosters open communication and ensures that the needs and expectations of all involved parties are understood and addressed. By involving stakeholders early and continuously, project managers can gain valuable insights, build consensus, and manage expectations effectively. This leads to increased satisfaction and a higher likelihood of project success.

What does a burn-down chart track in an agile-based security project execution?

Answer: Remaining work versus time to detect schedule slippage

A burn-down chart plots remaining work (story points or tasks) against elapsed time, allowing the team to see whether they are on track to complete the sprint or release.

A security project manager needs to document the boundaries and deliverables of a new security initiative. Which planning artifact is most appropriate for this purpose?

Answer: Project scope statement

A project scope statement defines boundaries, deliverables, exclusions, and acceptance criteria for the security project.

Which risk metric represents the maximum tolerable downtime for a system before business operations are critically impaired?

Answer: Recovery Time Objective (RTO)

The Recovery Time Objective (RTO) defines the maximum acceptable length of time a system can be offline following a disruption before causing unacceptable business impact.

During project execution, a key security engineer unexpectedly resigns. Which response BEST maintains project continuity?

Answer: Activate the resource management plan's contingency for critical roles

The resource management plan should include contingency procedures for critical role vacancies, which may involve cross-training, contractor engagement, or workload rebalancing.

When assessment results for a Certified Security Project Manager evaluation are inconclusive, the BEST practice is to:

Answer: Conduct additional assessment using alternative methods

Inconclusive results require additional assessment using alternative methods to gather more data. This triangulation approach helps clarify findings without compromising the integrity of the assessment process.

When planning a security awareness training program project, the manager should capture both internal and external stakeholders using which tool?

Answer: Stakeholder register

A stakeholder register documents all identified stakeholders, their roles, interests, and influence on the project.

How does the project manager address scope creep?

Answer: By assessing new requests and adjusting the scope as needed

To address scope creep, the project manager must implement a robust change control process. This involves carefully assessing any new requests or proposed changes to the project scope, evaluating their impact on the schedule, budget, and resources. If a change is approved, the project manager formally adjusts the project plan accordingly, ensuring that the project remains controlled and viable.