Explain How Continuous Process Improvement Can Enrich and Expand a Metrics Driven Security Programs Efficacy. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A security operations team has been using a monthly dashboard of key metrics (e.g., mean time to detect, patch compliance) for the past year. After each monthly review, they make a one-off change to address the most recent dip, but the same issues keep recurring. The team lead wants to shift to a more sustainable approach that uses the metrics as a feedback loop to drive ongoing improvement. Which change best embodies Continuous Process Improvement (CPI)?

   • AEstablish a recurring cycle where metrics are analyzed, root causes are identified, corrective actions are implemented, and the results are evaluated in the next cycle.
   • BReplace the current metrics with a new set of metrics that are more difficult to game and more closely aligned to business risk.
   • CAssign a single analyst to own the monthly review and make all corrective decisions to ensure consistency.
   • DIncrease the frequency of the dashboard refresh to weekly so that more data points are available for the monthly review.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security team has been using CPI for a year and has seen improvements in several metrics. However, the team is concerned that the improvements are not sustainable because they rely on the efforts of a few key individuals. How can CPI help make the improvements more sustainable?

   • ARotate the responsibility for leading CPI cycles among team members to share the workload.
   • BIncrease the frequency of CPI cycles to accelerate the pace of improvement.
   • CFocus on automating the metrics collection to reduce manual effort.
   • DDocument the processes and lessons learned from each CPI cycle and incorporate them into standard operating procedures.
   Reveal Solution Discussion Select an answer first