A security project to implement a new privileged access management (PAM) solution is facing resistance from system administrators who fear losing control. The steering committee is concerned about project delays. What is the best approach to balance stakeholder concerns and project progress?

Engage system administrators in a pilot program and incorporate their feedback into the rollout plan.

Delay the project until all administrators fully support the change.

Mandate immediate full deployment to enforce the new controls.

Escalate the issue to the steering committee and ask them to override the administrators.

A security project to implement a new access control system is in the planning phase. The project manager is developing the project plan. Which of the following elements should be included in the plan? (Select all that apply.)

A risk register identifying potential threats to the project and mitigation strategies.

A list of all security vulnerabilities in the organization's current systems.

A detailed project schedule with milestones and dependencies.

A detailed budget breakdown for all project resources and activities.

A stakeholder communication plan outlining how and when stakeholders will be engaged.

What is the primary purpose of a change control process in a security project?

To document only the final state of the project

To ensure all changes are approved and their impact is assessed

To automatically implement any requested change without review

To eliminate the need for project monitoring

EC-CouncilAssociate C|CISO

Domain 3Objective 2

Information Security Projects ACCISO Practice Questions (Page 10)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

9concepts

Questions 46–50

46foundation · easy
What is the first step in the risk management process for a security project?
Select an answer first
47expert · hard
A security project to implement a new privileged access management (PAM) solution is facing resistance from system administrators who fear losing control. The steering committee is concerned about project delays. What is the best approach to balance stakeholder concerns and project progress?
Select an answer first
48application · medium · select all that apply
A security project to implement a new access control system is in the planning phase. The project manager is developing the project plan. Which of the following elements should be included in the plan? (Select all that apply.)
Select an answer first
49foundation · easy
What is the primary purpose of a change control process in a security project?
Select an answer first
50foundation · easy
Which risk response strategy involves transferring the risk to a third party, such as purchasing cyber insurance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Information Security Projects ACCISO Practice Questions (Page 10)

Questions 46–50

What is the first step in the risk management process for a security project?

A security project to implement a new privileged access management (PAM) solution is facing resistance from system administrators who fear losing control. The steering committee is concerned about project delays. What is the best approach to balance stakeholder concerns and project progress?

A security project to implement a new access control system is in the planning phase. The project manager is developing the project plan. Which of the following elements should be included in the plan? (Select all that apply.)

What is the primary purpose of a change control process in a security project?

Which risk response strategy involves transferring the risk to a third party, such as purchasing cyber insurance?

Keep studying — Security Program Management and Operations