Security Project Execution & Monitoring Flashcards

During execution of a security project, a critical vulnerability is discovered in a third-party library used by the system under development. What is the BEST immediate action?

Answer: Raise a risk event, assess impact, and escalate per the risk management plan

Discovering a vulnerability during execution requires raising a risk event, assessing its impact on project scope and timeline, and escalating according to the pre-defined risk management plan.

Which monitoring technique involves comparing planned security deliverables against actual completions using a cumulative S-curve?

Answer: Earned Value Management (EVM)

Earned Value Management uses S-curves to plot cumulative planned value against earned value and actual cost, enabling performance assessment of security deliverables.

A security project manager notices the Schedule Performance Index (SPI) is 0.82. What does this indicate?

Answer: The project is behind schedule — only 82% of planned work is complete

An SPI below 1.0 means the project is behind schedule; an SPI of 0.82 means only 82 cents of planned work has been accomplished for every dollar of scheduled work.

What is the PRIMARY purpose of a security project status report during the monitoring phase?

Answer: To communicate current progress, risks, and issues to stakeholders

Status reports during monitoring primarily serve to communicate current project health, including progress against the baseline, active risks, and open issues to stakeholders.

When conducting security control testing during project execution, which approach ensures coverage without duplicating effort?

Answer: Use a requirements traceability matrix to map controls to test cases

A requirements traceability matrix links each security control requirement to specific test cases, ensuring complete coverage while preventing redundant testing efforts.

A security project team is implementing a SIEM solution. The project manager observes that log ingestion rates are 40% below target. Which is the MOST appropriate corrective action?

Answer: Perform root cause analysis and adjust the implementation plan accordingly

Underperformance against a target metric requires root cause analysis to identify whether the gap stems from configuration, infrastructure, or scope issues before applying corrective action.

Which document formally authorizes the project team to begin executing security project work packages?

Answer: Work authorization system output

A work authorization system provides formal approval to begin specific work packages, ensuring security activities are executed in the correct sequence and by authorized resources.