COSC 4361 Chapter 5

1. Small organizations spend more per user on security than medium- and large-sized organizations.

• True
• False

2. Legal assessment for the implementation of the information security program is almost always done by the information security or IT departments

• True
• False

3. Threats from insiders are more likely in a small organization than in a large one

• True
• False

4. The security education, training, and awareness (SETA) program is designed to reduce the occurrence of external security attacks

• True
• False

5. On-the-job training can result in substandard work performance while the trainee gets up to speed.

• True
• False

6. The first step in the work breakdown structure (WBS) approach encompasses activities, but not deliverables.

• True
• False

7. Planners need to estimate the effort required to complete each task, subtask, or action step.

• True
• False

8. The work breakdown structure (WBS) can only be prepared with a complex specialized desktop PC application.

• True
• False

9. A task or subtask becomes a(n) action step when it can be completed by one individual or skill set and when it includes a single deliverable

• True
• False

10. Each organization has to determine its own project management methodology for IT and information security projects.

• True
• False