Security Project Closing Flashcards

During project closure, which document formally releases the project team from their security responsibilities?

Answer: Project closure report

The project closure report formally documents the completion of the project and releases team members from their assigned responsibilities.

A security project manager is closing a network segmentation project. What is the FIRST step before handing over to operations?

Answer: Conduct a final security assessment to verify deliverables meet requirements

Verifying that all deliverables meet the defined security requirements must occur before handover to ensure the project objectives were achieved.

Which artifact captures unresolved security risks that the operations team must manage after project closure?

Answer: Risk register transition document

A risk register transition document passes outstanding risks and their mitigation plans to the operational team responsible for ongoing management.

What is the purpose of a post-implementation security review during project closing?

Answer: To evaluate whether implemented security controls are functioning as intended

A post-implementation security review confirms that controls are operating effectively and meeting the security objectives defined at project initiation.

When closing a security project, sensitive project records such as vulnerability assessments should be:

Answer: Archived according to the organization's data retention and classification policy

Sensitive records must be archived following established data retention and classification policies to ensure compliance and controlled access.

A CSPM is conducting final stakeholder acceptance for a firewall upgrade project. The client signs the acceptance form but notes a minor configuration issue. What should the PM do?

Answer: Log the issue as a known deficiency, escalate to operations, and proceed with formal closure

Minor post-acceptance deficiencies are documented and transitioned to operations rather than re-opening the project, which would delay closure.

Which of the following is a key component of the administrative closure process in a security project?

Answer: Confirming all contracts and procurement activities are closed

Administrative closure includes verifying that all procurement contracts are settled, payments finalized, and vendor obligations discharged.