InfoSec Chapter 10 Quiz

Effective planning for information security involves: a. collecting information about an organization's objectives. b. collecting information about an organization's information security environment. c. collecting information about an organization's technical architecture. d. All of the above

all of the above

The Lewin change model includes __________. a. unfreezing b. moving c. refreezing d. All of the above

all of the above

The __________ methodology has been used by many organizations and requires that issues be addressed from the general to the specific, and that the focus be on systematic solutions instead of individual problems.

bull's-eye

A(n) __________ is used to justify that the project will be reviewed and verified prior to the development of the project plan.

cba

Some cases of __________ are simple, such as requiring employees to begin using a new password on an announced date.

direct changeover

In project planning, the tasks or action steps that come before the specific task at hand are commonly referred to as prerequisites.

false

The first step in the work breakdown structure (WBS) approach encompasses activities, but not deliverables.

false

Technology __________ guides how frequently technical systems are updated, and how technical updates are approved and funded.

governance

In the __________ process, measured results are compared against expected results.

negative feedback loop

In a __________ implementation, the entire security system is put in place in a single office, department, or division before expanding to the rest of the organization.

pilot

By managing the __________, the organization can reduce unintended consequences by having a process to resolve the potential conflict and disruption that uncoordinated change can introduce.

process of change

"Unfreezing" in the Lewin change model involves thawing hard-and-fast habits and established procedures.

true

The budgets of public organizations are usually the product of legislation or public meetings.

true

The primary drawback to the direct changeover approach is that if the new system fails or needs modification, users may be without services while the system's bugs are worked out.

true

A(n) __________ is a simple project management planning tool.

wbs