CSPM Security Project Closing 5

Question 1

During security project closing, which activity specifically addresses ensuring that security tools and licenses are properly transferred or decommissioned?

Accepted Answer

Asset disposition

Answer

Asset disposition covers the proper transfer, reassignment, or decommissioning of hardware, software, and licenses at the end of a security project.

Question 2

A project sponsor requests the closure of a security project before all planned controls are implemented due to budget cuts. The PM's FIRST action should be:

Accepted Answer

Document the incomplete controls, assess residual risk, and obtain sponsor sign-off acknowledging the risk acceptance

Answer

When closing before completion, the PM must document all gaps, assess the resulting residual risk, and formally obtain sponsor acknowledgment of accepted risk.

Question 3

Which compliance requirement often mandates that security project records be retained for a minimum defined period after project closure?

Accepted Answer

Regulatory and industry standards such as HIPAA, PCI-DSS, or SOX

Answer

Regulatory frameworks like HIPAA, PCI-DSS, and SOX specify mandatory data retention periods for security-related records, which must be honored during project closure.

Question 4

A final security audit conducted at project closure reveals that one control objective was not fully met. The PM should:

Accepted Answer

Document the finding, create a remediation plan, and transfer it to the operations team

Answer

Unmet control objectives must be honestly documented with a remediation plan that is handed off to operations, ensuring accountability without falsifying records.

Question 5

What is the primary goal of obtaining formal 'sign-off' from stakeholders at the end of a security project?

Accepted Answer

To create a legal and formal record that deliverables were accepted and project obligations fulfilled

Answer

Formal sign-off creates an auditable record confirming stakeholders accepted the deliverables, which protects all parties and legally closes project obligations.

(CSPM) Certified Security Project Manager Practice Test

(CSPM) Certified Security Project Manager Practice Test

CSPM Security Project Closing 5