CSPM CSPM Security Governance & Leadership 2

Question 1

A CSPM professional conducting a security program gap analysis compares the current state against:

Accepted Answer

A desired target state or recognized security standard

Answer

A gap analysis measures the difference between an organization's current security posture and a target framework or maturity level to identify areas requiring improvement.

Question 2

Which leadership model focuses on inspiring teams through vision, motivation, and transformational change — particularly relevant in driving security culture shifts?

Accepted Answer

Transformational leadership

Answer

Transformational leaders motivate teams by articulating a compelling vision and inspiring change, making this style especially effective for embedding security culture across an organization.

Question 3

In a security project, a RACI matrix is used to clarify:

Accepted Answer

Roles and responsibilities for project tasks and decisions

Answer

A RACI matrix defines who is Responsible, Accountable, Consulted, and Informed for each project activity, preventing confusion and gaps in ownership.

Question 4

What is the key difference between a security policy and a security standard?

Accepted Answer

Policies state high-level intent and requirements; standards specify mandatory controls to meet those requirements

Answer

Security policies establish the 'what and why' at a high level, while standards define the specific, mandatory 'how' — the measurable requirements that satisfy the policy.

Question 5

Which stakeholder communication approach is most effective when presenting security risk findings to a non-technical executive board?

Accepted Answer

Business-impact-focused summaries tied to financial and operational risk

Answer

Executives make decisions based on business impact and financial risk, so security findings must be translated into organizational risk language — not raw technical detail.

(CSPM) Certified Security Project Manager Practice Test

(CSPM) Certified Security Project Manager Practice Test

CSPM CSPM Security Governance & Leadership 2