CHAPTER SUMMARY

A risk management plan is a specific type of project plan. The project is to identify and mitigate risks and is started by creating objectives and a project scope. Risks are then identified. Finally, a response plan is created as recommendations to mitigate the risks. Management can then choose to accept, defer, or modify the recommendations. A risk management plan should include a risk register.

The recommendations are then implemented. A primary tool used to track the recommendations is a plan of action and milestones (POAM). The POAM is a living document that is updated throughout the project. Various charting tools can be used to supplement the POAM to ease project management tasks. The NIST RMF (SP 800-37 Rev. 2) is an effective guide that can be used when implementing a risk management plan.

KEY CONCEPTS AND TERMS

affinity diagram

brainstorming

cause and effect diagram

critical path chart

firewall

firewall appliance

firewall policy

Gantt chart

milestone

milestone plan chart

National Institute of Science and Technology (NIST)

National Institute of Science and Technology Risk Management Framework (RMF)

plan of action and milestones (POAM)

risk statement

scope

scope creep

stakeholder

CHAPTER 4 ASSESSMENT

  1. What are valid contents of a risk management plan?
    1. Objectives
    2. Scope
    3. Recommendations
    4. POAM
    5. All of the above
  2. What should be included in the objectives of a risk management plan?
    1. A list of threats
    2. A list of vulnerabilities
    3. Costs associated with risks
    4. Cost-benefit analysis
    5. All of the above
  3. What will the scope of a risk management plan define?
    1. Objectives
    2. POAM
    3. Recommendations
    4. Boundaries
  4. What problem can occur if the scope of a risk management plan is not defined?
    1. Excess boundaries
    2. Stakeholder loss
    3. Scope creep
    4. SSCP
  5. What is a stakeholder?
    1. A mark that identifies critical steps
    2. An individual or a group that has an interest in the project
    3. A critical process or procedure
    4. Another name for the risk management plan project manager
  6. A key stakeholder should have authority to make decisions about a project, including authority to provide additional resources.
    1. True
    2. False
  7. A risk management plan project manager oversees the entire plan. What is the project manager responsible for? (Select two.)
    1. Ensuring costs are controlled
    2. Ensuring the project stays on schedule
    3. Ensuring stakeholders have adequate funds
    4. Ensuring recommendations are adopted
  8. A risk management plan includes steps to mitigate risks. Who is responsible for choosing what steps to implement?
    1. The project manager
    2. Management
    3. The risk management team
    4. The POAM manager
  9. A risk management plan includes a list of findings in a report. The findings identify threats and vulnerabilities. What type of diagram can document some of the findings?
    1. Gantt chart
    2. Critical path chart
    3. POAM diagram
    4. Cause and effect diagram
  10. What three elements should be included in the findings of the risk management report?
    1. Causes, criteria, and effects
    2. Threats, causes, and effects
    3. Criteria, vulnerabilities, and effects
    4. Causes, criteria, and milestones
  11. What is a primary tool used to identify the financial significance of a mitigation tool?
    1. Ishikawa diagram
    2. Fishbone diagram
    3. CBA
    4. POAM
  12. A fishbone diagram can link causes with effects.
    1. True
    2. False
  13. A fishbone diagram is also known as a(n):
    1. Risk management framework
    2. Program management tool
    3. Ishikawa diagram
    4. NIST core plan
  14. What is the NIST Risk Management Framework?
    1. The planning phase of the systems life cycle
    2. A process that combines security and risk management as part of a systems development life cycle
    3. A record of project milestones
    4. POAM
  15. A POAM is used to track the progress of a project. What type of chart is commonly used to assist with tracking?
    1. Fishbone chart
    2. Cause and effect chart
    3. Gantt chart
    4. POAM chart
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.219.103.183