You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget…

Question

Options

• AReview time schedules
• BVerify budget
• CVerify resources
• DVerify constraints

• A
  15% (3)
• B
  5% (1)
• C
  75% (15)
• D
  5% (1)

Explanation

Verifying resources (C) is the correct next step because project management best practices follow a logical diagnostic sequence: after confirming strategic alignment and scope are sound, you must determine whether the project has the people, tools, and materials needed to execute - since inadequate or misallocated resources are the most common root cause of both schedule delays and budget overruns. Until you know whether the right resources exist, neither the schedule nor the budget can be meaningfully evaluated.

Why the distractors are wrong:

• A (Review time schedules): Schedules are built around resource availability - reviewing them before verifying resources puts the cart before the horse.
• B (Verify budget): Budget is a downstream product of resource costs; you cannot meaningfully audit the budget until you know whether the resource plan is valid.
• D (Verify constraints): Constraints (risks, dependencies, limitations) are typically identified during scope definition, which was already completed in this scenario.

Memory tip: Think of the recovery sequence as "Goals → Scope → Resources → Schedule → Budget" - each layer depends on the one before it. Since goals and scope were already validated, resources are simply the next rung on the ladder.

No community discussion yet for this question.