SOC Project Planning & Execution 3

Question 1

A SOC audit project manager uses Earned Value Management (EVM). If EV = $80,000 and AC = $95,000, what does this indicate?

Accepted Answer

The project is over budget

Answer

A Cost Variance (CV = EV - AC) of -$15,000 means more was spent than the value of work completed, indicating an over-budget condition.

Question 2

Which SOC trust service criteria category is MOST directly addressed by establishing a formal project change control process?

Accepted Answer

Change Management under Common Criteria (CC8)

Answer

CC8 (Change Management) under the Common Criteria governs how changes are authorized, tested, and implemented in a controlled manner.

Question 3

What is the PRIMARY purpose of a lessons-learned session at the close of a SOC audit project?

Accepted Answer

To document insights that improve future engagements

Answer

Lessons-learned sessions capture both successes and failures to improve processes, tools, and planning for future audit projects.

Question 4

In project planning for a SOC engagement, 'management's description of the system' must be evaluated for which quality?

Accepted Answer

Completeness and accuracy

Answer

The auditor must evaluate whether management's description fairly presents the system as designed and implemented, assessing both completeness and accuracy.

Question 5

A project team building a SOC compliance roadmap uses a work breakdown structure (WBS). What does the WBS primarily provide?

Accepted Answer

A hierarchical decomposition of project deliverables into manageable components

Answer

A WBS decomposes the total project scope into smaller, manageable work packages arranged hierarchically.

(SOC) System and Organization Controls Certification Practice Test

(SOC) System and Organization Controls Certification Practice Test

SOC Project Planning & Execution 3