Information Security Projects ACCISO Practice Questions (Page 1)

Questions 1–5

1. 1application · medium · select all that apply

   A security project to implement a new data encryption solution has identified several risks. Which of the following are appropriate risk mitigation strategies for the project? (Select all that apply.)

   • AIgnore the risk because it is unlikely to occur.
   • BTransfer the risk by purchasing cyber insurance that covers data loss.
   • CConduct additional testing on legacy systems to reduce the likelihood of compatibility issues.
   • DDevelop a contingency plan to roll back the encryption if critical systems fail.
   • EAccept the risk if the cost of mitigation exceeds the potential impact.
   Check answers Discussion Select an answer first
2. 2foundation · easy

   Which component of a security project plan defines the boundaries of the project and specifies what is included and excluded?

   • ARisk management plan
   • BProject scope
   • CProject objectives
   • DProject schedule
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security project to deploy a new data loss prevention (DLP) solution is nearing completion. The project team has finished the technical implementation and passed user acceptance testing. What is the most important remaining activity to ensure the DLP controls remain effective after the project closes?

   • AArchive all project documents and close the project without further action.
   • BSchedule a post-implementation review but leave the DLP system unmonitored until the review.
   • CHand over the DLP solution to the operations team with documented runbooks and training.
   • DDisband the project team immediately to reduce costs.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary role of a steering committee in security project governance?

   • ATo write the project's code or configure security tools
   • BTo provide high-level oversight and strategic direction
   • CTo handle all stakeholder communication
   • DTo perform day-to-day project tasks
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which governance structure is most appropriate for ensuring a security project aligns with the organization's overall business strategy?

   • AA steering committee that includes senior executives and business leaders
   • BAn external vendor who defines the project's objectives
   • CA single project manager who makes all strategic decisions
   • DA project team that works independently without external oversight
   Reveal Solution Discussion Select an answer first