Security Project Closing Flashcards

Which metric is MOST relevant when evaluating the success of a security project during closing?

Answer: Reduction in identified security risks compared to baseline

Measuring risk reduction against the baseline directly reflects whether the security project achieved its core objective.

During project closure, a lessons learned session reveals that a critical security control was deployed two weeks late. This information should PRIMARILY be used to:

Answer: Improve planning and scheduling in future security projects

Lessons learned from delays are captured to refine scheduling practices and improve delivery in future projects.

A security project manager is handing over an implemented SIEM system to the operations team. Which document is MOST critical to include in the handover package?

Answer: Runbook detailing operational procedures and alert response steps

A runbook provides operations staff with the step-by-step procedures needed to effectively manage and respond to the SIEM system post-handover.

What distinguishes project closure from phase closure in a security project?

Answer: Project closure terminates all project activities permanently, while phase closure only ends one phase

Project closure permanently concludes the project, whereas phase closure marks the end of a specific phase while the project continues.

A security PM discovers undocumented system access credentials during project closure. The BEST immediate action is to:

Answer: Report the discovery to the information security team and follow the credential management policy

Undocumented credentials represent a security risk and must be reported to the security team immediately for proper handling per policy.

Which of the following BEST describes 'scope verification' in the context of security project closing?

Answer: Obtaining formal stakeholder acceptance that all security deliverables meet requirements

Scope verification in project closing is the process of formally obtaining stakeholder acceptance that deliverables meet the agreed security requirements.

When a security project is terminated early due to organizational restructuring, what must the PM ensure during closure?

Answer: Partially completed deliverables are documented and their security implications assessed

Early termination requires documenting all partially completed work and assessing any residual security risks to prevent unmanaged vulnerabilities.