MOIS4 CH01 REVIEW QUESTIONS
1. List and describe the three communities of interest that engage in an organization’s efforts to
solve InfoSec problems. Give two or three examples of who might be in each community.
Answer: InfoSec community (InfoSec managers and professionals); IT community (InfoSec
2. What is information security? What essential protections must be in place to protect
information systems from danger? Answer: InfoSec is the protection of information and its
3. What is the importance of the C.I.A. triangle? Define each of its components. Answer: The
4. Describe the CNSS security model. What are its three dimensions? Answer: The CNSS
5. What is the definition of “privacy” as it relates to InfoSec? How is this definition different
from the everyday definition? Why is this difference significant? Answer: In InfoSec,
6. Define the InfoSec processes of identification, authentication, authorization, and
accountability. Answer: Identification is an information system’s recognition of individual
7. What is management and what is a manager? What roles do managers play as they execute
their responsibilities? Answer: Management is the process of achieving objectives/goals using
8. How are leadership and management similar? How are they different? Answer: Leadership
9. What are the characteristics of management based on the method described in the text as the
“popular approach” to management? Define each characteristic. Answer: Based on a popular
10. What are the three types of general planning? Define each. Answer: The three types of
general planning are tactical, strategic, and operational. Tactical planning focuses on resource
11. List and describe the five steps of the general problem-solving process. Answer: (1)
Recognize and define the problem; define exactly which problem needs to be addressed. (2)
12. Define “project management.” Why is project management of particular interest in the field
of InfoSec? Answer: Project management involves identifying and controlling the resources
13. Why are project management skills important to the InfoSec professional? Answer: IT
14. How can security be both a project and a process? Answer: Each element of an InfoSec
15. What are the nine areas that make up the component processes of project management?
Answer: The processes are: integration, scope, time, cost, quality, human resources,
communications, risk, and procurement.
16. What are the three planning parameters that can be adjusted when a project is not being
executed according to plan? Answer: When a project is not being executed according to plan,
17. Name and very briefly describe some of the manual and automated tools that can be used to
help manage projects. Answer: Work breakdown structure (WBS), which breaks the project
18. What is a work breakdown structure (WBS) and why is it important? Answer: In a WBS, the
project plan is first broken down into a few major tasks. Each of these major tasks is placed
19. List and describe the various approaches to task sequencing. Answer: One method of
sequencing tasks and subtasks in a project plan is known as “network scheduling.” The
20. How do PERT/CPM methods help to manage a project? Answer: They help by determining
the path through the various activities. You can determine the critical path—the sequence of