A security project to implement encryption for data at rest is in progress. The project manager needs to communicate progress to different stakeholders, including the board, IT staff, and end users. What is the MOST effective communication strategy?

Develop a communication plan that tailors the message, frequency, and channel for each stakeholder group based on their needs.

Avoid communication until the project is complete to prevent confusion.

Communicate only with the project sponsor and let them disseminate information to others.

Send the same detailed technical report to all stakeholders to ensure consistency.

What is the goal of quality assurance in an information security project?

To replace the need for security testing

To speed up project delivery by reducing testing

To ensure deliverables meet defined quality standards and security requirements

What is a key activity in vendor management for an information security project?

Paying the vendor without reviewing deliverables

Avoiding any communication with the vendor

Delegating all project decisions to the vendor

Monitoring vendor performance against contractual obligations

A regional bank is initiating a project to implement a new customer data encryption standard. The CISO wants to ensure the project is properly scoped and that all affected parties are identified early. Which action should the CISO take FIRST?

Select the encryption technology vendor and negotiate the contract

Develop a detailed project schedule with milestones and dependencies

Draft the project charter with a clear scope statement and a stakeholder register

Conduct a lessons-learned review from a previous encryption project

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 2

Information Security Projects CCISO Practice Questions (Page 1)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 71 practice questions to prepare you well beyond it. (estimate)

71questions here

15free pages

20concepts

20 Concepts in This Objective

Project Management Fundamentals
Project Lifecycle
Project Initiation
Project Planning
Project Execution
Project Monitoring and Control
Project Closure
Security Project Governance
Stakeholder Management
Resource Management
Risk Management in Projects
Quality Assurance in Projects
Communication Management
Integration with Security Operations
Compliance and Standards
Project Management Tools and Techniques
Vendor and Procurement Management
Change Management
Metrics and KPIs
Continuous Improvement

Questions 1–5

1application · medium
A security project to implement encryption for data at rest is in progress. The project manager needs to communicate progress to different stakeholders, including the board, IT staff, and end users. What is the MOST effective communication strategy?
Select an answer first
2foundation · easy
What is the goal of quality assurance in an information security project?
Select an answer first
3foundation · easy
What is a key activity in vendor management for an information security project?
Select an answer first
4application · medium
A regional bank is initiating a project to implement a new customer data encryption standard. The CISO wants to ensure the project is properly scoped and that all affected parties are identified early. Which action should the CISO take FIRST?
Select an answer first
5foundation · easy
Which of the following is an example of an industry standard that may apply to an information security project?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.