Security Project Execution & Monitoring Flashcards

During a penetration test phase of a security project, the tester discovers a critical finding outside the agreed scope. What should the project manager do?

Answer: Raise a change request and notify relevant stakeholders before proceeding

Out-of-scope findings must be handled through formal change control; the project manager raises a change request and informs stakeholders before any work proceeds outside the agreed boundary.

What is the MAIN purpose of a security project's daily stand-up during the execution phase?

Answer: To identify blockers, synchronize team activities, and track short-term progress

Daily stand-ups are brief synchronization meetings to surface blockers, align on priorities, and ensure team members are on track with short-term tasks.

Which metric BEST indicates whether a security project's cost performance is acceptable during monitoring?

Answer: Cost Performance Index (CPI)

The Cost Performance Index (CPI = Earned Value ÷ Actual Cost) directly measures cost efficiency; a CPI ≥ 1.0 indicates the project is at or under budget.

A security project manager needs to verify that encryption standards are being applied consistently across all system components. Which monitoring activity is MOST appropriate?

Answer: Conducting a security compliance audit against defined standards

A compliance audit compares actual implementation against defined encryption standards, providing systematic verification that controls are applied consistently across all components.

During project execution, a key security engineer unexpectedly resigns. Which response BEST maintains project continuity?

Answer: Activate the resource management plan's contingency for critical roles

The resource management plan should include contingency procedures for critical role vacancies, which may involve cross-training, contractor engagement, or workload rebalancing.

What does a burn-down chart track in an agile-based security project execution?

Answer: Remaining work versus time to detect schedule slippage

A burn-down chart plots remaining work (story points or tasks) against elapsed time, allowing the team to see whether they are on track to complete the sprint or release.

Which action BEST supports quality assurance of security deliverables during execution?

Answer: Performing continuous process reviews and audits throughout execution

Quality assurance involves ongoing process reviews and audits during execution to ensure processes used to create deliverables conform to defined quality standards.