CIPS L4M2 Exam Dumps

Explanation

ISO/IEC 27001 is widely known, providing requirements for an information security management system (ISMS), though there are more than a dozen standards in the ISO/IEC 27000 family. Using them enables organizations of any kind to manage the security of assets such as financial infor-mation, intellectual property, employee details or information entrusted by third parties.

LO 3, AC 3.1

Explanation

The writing of a complex specification should be treated as a project because it requires the brain power from different stakeholders. Many tools and processes of project management can be applied to complex specification development. Before engaging with the stakeholders and implementing the project, the project initial document should developed.

A Project Initiation Document (PID) is one of the most important components of project manage-ment, which forms the foundation for a company project. It is a reference point during the entire project, for the client as well as for the project team.

A PID bundles documentation into a logical reference work that collects all important information needed to start and run a project from a good foundation. After that, Project Initiation Document must be transferred to all stakeholders, including business sponsors.

This forms the basis for the project management. The documentation from which the PID is com-posed include the business case in which the project's justification can be found, the communica-tion plan and the project plan.

The PID is composed out of collected information and includes, among others, the following com-ponents:

- Project goal(s); what do you want to achieve with the project?

- Project size; how large is the project, how long does it take and how many people are involved?

- Project organisation; who are involved in the project, what are their tasks, responsibilities and authority?

- Limits and risks; what can cause a project to stagnate and are there risks related to the project?

- Stakeholders; who has a stake in the success of the project?

- Project checks and frame reporting; by carefully taking into account evaluation moments, it is clear to everyone what sample tests can be carried out during the process.

In addition, it is important that the Project Initiation Document also contains the following infor-mation:

- The background and occasion of the project, which together provide information about the con-text.

- The project organisational structure, which describes who has which management responsibility in the project.

- The project quality plan, describing who controls the quality of the products to be delivered and how it will take place.

- The total project planning, including the duration of all activities.

- The exception process, which describes how exceptions are dealt with and the steps of the escalation procedure.

- The risk log, including the measures that will be taken when there are unforeseen risks.

- The documentation structure of the project, in which the encoding and storage of all documents and products to be provided by the project has been recorded in advance.

- CIPS study guide page 148

- Project Initiation Document (PID), a project management tool | ToolsHero

LO 3, AC 3.3

Explanation

There are many factors that need to be considered when making a business decision. Costs and benefits are among those factor. To estimate the length of time in which an investment reaches a break-even point, businesses often use the payback period. The payback period refers to the amount of time it takes to recover the cost of an investment.

'Yes, because it takes everything into account': It ignores the time value of money (TVM), unlike other methods of capital budgeting such as net present value (NPV), internal rate of return (IRR), and discounted cash flow.

'No, because payback period doesn't take into account price fluctuations': Though it doesn't take into account price fluctuation, payback period is still useful in financial and capital budgeting.

'No, because payback period can be only used to calculate the depreciation of a fixed asset': Payback period only calculates the length of time in which the benefits of a charge repay its costs.

LO 1, AC 1.3

Explanation

This International Standard (ISO 27001:2013) has been prepared to provide requirements for establishing, implementing, maintaining and continually improving an information security management system. The adoption of an information security management system is a strategic decision for an organization. The establishment and implementation of an organization's information security management system is influenced by the organization's needs and objectives, security requirements, the organizational processes used and the size and structure of the organization. All of these influencing factors are expected to change over time.

The information security management system preserves the confidentiality, integrity and availability of information by applying a risk management process and gives confidence to interested parties that risks are adequately managed.

It is important that the information security management system is part of and integrated with the organization's processes and overall management structure and that information security is considered in the design of processes, information systems, and controls. It is expected that an information security management system implementation will be scaled in accordance with the needs of the organization.

This International Standard can be used by internal and external parties to assess the organization's ability to meet the organization's own information security requirements.

The order in which requirements are presented in this International Standard does not reflect their importance or imply the order in which they are to be implemented. The list items are enumerated for reference purpose only.

ISO/IEC 27000 describes the overview and the vocabulary of information security management systems, referencing the information security management system family of standards (includ-ing ISO/IEC 27003[2], ISO/IEC 27004[3] and ISO/IEC 27005[4]), with related terms and defini-tions.

- ISO/IEC 27001:2013 Information technology --- Security techniques --- Information security management systems --- Requirements

LO 3, AC 3.1