CSPM CSPM Security Governance & Leadership 1

Question 1

In security project management, which governance document defines the acceptable use of organizational IT resources by employees?

Accepted Answer

Acceptable Use Policy (AUP)

Answer

An Acceptable Use Policy (AUP) establishes the rules and restrictions governing how employees may use organizational technology assets, networks, and data.

Question 2

Which role in a security governance structure is ultimately accountable for accepting residual risk on behalf of the organization?

Accepted Answer

Authorizing Official (AO)

Answer

The Authorizing Official (AO), typically a senior executive, formally accepts residual risk and grants the Authority to Operate (ATO) for a system under NIST RMF.

Question 3

A security governance framework ensures strategic alignment by linking security objectives to:

Accepted Answer

Overall business goals and mission objectives

Answer

Effective security governance aligns cybersecurity investments and objectives with the organization's overarching business strategy, ensuring security enables rather than hinders mission success.

Question 4

What is the primary function of a security steering committee in a large organization?

Accepted Answer

Providing executive oversight and strategic direction for the security program

Answer

A security steering committee brings together executive and senior leadership to set strategic security priorities, approve major decisions, and ensure program alignment with business goals.

Question 5

The concept of 'separation of duties' in security governance is primarily designed to:

Accepted Answer

Prevent fraud and errors by ensuring no single person controls an entire process

Answer

Separation of duties divides critical processes among multiple individuals to reduce the risk of insider fraud, error, or abuse by ensuring no single employee has complete control.

(CSPM) Certified Security Project Manager Practice Test

(CSPM) Certified Security Project Manager Practice Test

CSPM CSPM Security Governance & Leadership 1