Module 11 : Implementing Information Security

The goal of security assurance is to ensure software meets compliance only during the deployment phase.

Why did Microsoft pause development in 2002 to focus on security?

Why are parallel operations considered the safest changeover method?

Which SDLC phase determines the goals, scope, and constraints of a proposed secure system?

In DevSecOps, what is a key benefit over traditional DevOps from a security perspective?

Open design means hiding internal mechanisms to prevent attackers from learning system behavior.

Which approach is most likely to miss embedded security requirements due to its emphasis on speed?

Which development methodology is specifically designed to build security into each stage and reduce long-term risk?

What is a potential consequence of failing to implement fail-safe defaults?

In Lewin's Change Model, what occurs during the "moving" phase?

Which of the following CIS Controls falls under organizational controls?

Which project planning consideration would most directly affect your ability to hire security analysts?

What distinguishes a pilot implementation from a phased one?

Why is the Work Breakdown Structure (WBS) essential in InfoSec project planning?

The Work Breakdown Structure (WBS) helps identify task dependencies, not just task content.

In the Bull’s-Eye model, which layer contains user-facing software systems?

Which leadership role ensures ongoing executive support and removes barriers during InfoSec projects?

Which of the following best defines “organizational feasibility” in project planning?