Question 1

An ideal organization fosters resilience to change. _________________________

Accepted Answer

An organization that fosters resilience to change can adapt more easily to challenges and disruptions, making it more sustainable and successful in the long-term.

Question 2

The primary drawback to the direct changeover approach is that if the new system fails or needs modification, users may be without services while the system's bugs are worked out. _________________________

Accepted Answer

The statement correctly identifies the primary drawback of direct changeover approach, which is the risk of system failure or bugs that may leave users without services.

Question 3

A direct changeover is also known as going "fast turnkey." _________________________

Accepted Answer

cold turkey

Question 4

Planning for the implementation phase requires the creation of a detailed request for proposal, which is often assigned either to a project manager or the project champion. _________________________

Accepted Answer

project plan

Question 5

The optimal time frame for training is usually one to three weeks before the new policies and technologies come online. _________________________

Accepted Answer

Training should ideally be conducted a few weeks before the implementation of new policies and technologies to ensure that employees have enough time to learn and retain the knowledge before putting it into practice.

Question 6

Effective planning for information security involves: 
A) collecting information about an organization's objectives. 
B) collecting information about an organization's information security environment. 
C) collecting information about an organization's technical architecture. 
D) All of the above

Accepted Answer

Effective planning for information security involves collecting information about an organization's objectives, information security environment, and technical architecture. It is important to have a holistic understanding of the organization's goals and infrastructure in order to develop a comprehensive and effective security plan.

Question 7

If the task is to write firewall specifications for the preparation of a(n) __________, the planner would note that the deliverable is a specification document suitable for distribution to vendors.
A) WBS
B) CBA 
C) SDLC
D) RFP

Accepted Answer

The task is to write firewall specifications for the preparation of an RFP (Request for Proposal) which is a document distributed to vendors to solicit proposals for a product or service. Therefore, the answer is D. The other options (WBS, CBA, and SDLC) are not directly related to the creation of an RFP document.

Question 8

A task or subtask becomes a(n) action step when it can be completed by one individual or skill set and when it includes a single deliverable. _________________________

Accepted Answer

An action step should be a specific, actionable task that can be completed by one individual or skill set and should result in a deliverable or outcome.

Question 9

Performance management is the process of identifying and controlling the resources applied to a project as well as measuring progress and adjusting the process as progress is made toward the goal. _________________________

Accepted Answer

Project

Question 10

The parallel operations strategy works well when an isolated group can serve as a test area, which prevents any problems with the new system dramatically interfering with the performance of the organization as a whole. _________________________

Accepted Answer

pilot implementation

Question 11

Tasks or action steps that come after the task at hand are called __________.
A) predecessors
B) successors 
C) children
D) parents

Accepted Answer

Successors are tasks or action steps that come after the task at hand. Predecessors are tasks or action steps that come before the task at hand. Children and parents are terms used in hierarchical structures or relationships.

Question 12

The RFP determines the impact that a specific technology or approach can have on the organization's information assets and what it may cost. _________________________

Accepted Answer

cost-benefit analysis, CBA, cost-benefit analysis (CBA), cost benefit analysis, cost benefit analysis (CBA), (CBA) cost-benefit analysis, (CBA) cost benefit analysis

Question 13

A proven method for prioritizing a program of complex change is the bull's-eye method. _________________________

Accepted Answer

The bull's-eye method is a proven method for prioritizing a program of complex change, where the most important and impactful changes are focused on first, followed by the less critical changes. This method ensures that resources are utilized effectively and that the organization is able to achieve its strategic objectives with minimal disruption to daily operations.

Question 14

In the early stages of planning, the project planner should attempt to specify dates only for major employees within the project. _________________________

Accepted Answer

milestones

Question 15

Corrective action decisions are usually expressed in terms of trade-offs. _________________________

Accepted Answer

Corrective action decisions often involve weighing the costs and benefits of different options and choosing the course of action that offers the most benefits while minimizing negative consequences. These trade-offs may involve considerations such as time, resources, effectiveness, and impact on stakeholders.

Question 16

Most information security projects require a trained project developer. _________________________

Accepted Answer

manager

Question 17

A(n) __________ is a simple project management planning tool.
A) RFP
B) WBS 
C) ISO 17799
D) SDLC

Accepted Answer

WBS stands for Work Breakdown Structure, which is a project management technique used to break down a project into smaller, manageable tasks. It is a simple planning tool that helps to organize and prioritize tasks and resources needed for a project. RFP (Request for Proposal) is a document used in procurement to request proposals from potential vendors. ISO 17799 is a standard that defines best practices for information security management. SDLC (Software Development Life Cycle) is a process used in software development to manage the creation, testing, and deployment of software products. While all of these concepts are relevant to project management, WBS is the best choice for a simple planning tool.

Question 18

Once a project is underway, it is managed using a process known as gap analysis, which ensures that progress is measured periodically. _________________________

Accepted Answer

Gap analysis is a process used to measure progress and identify areas where improvements can be made in a project. It involves analyzing the difference between the current state and the desired state, and taking action to close the gap. By regularly measuring progress through gap analysis, project managers can make informed decisions and ensure that the project is moving in the right direction.

Question 19

The date for sending the final RFP to vendors is considered a(n) __________, because it signals that all RFP preparation work is complete.
A) intermediate step
B) resource 
C) milestone
D) deliverable

Accepted Answer

A milestone is a significant event in a project that marks the completion of a major phase or activity. Sending out the RFP to vendors is a significant event that marks the completion of RFP preparation work, which makes it a milestone. The other choices do not accurately describe the function of sending out the final RFP.

Question 20

In project planning, the tasks or action steps that come before the specific task at hand are commonly referred to as prerequisites. _________________________

Accepted Answer

predecessors

Quiz 10: Implementing Information Security