Which of the following methodologies references the recommended industry standard that Information security project managers should follow?

Question

Options

• AThe Security Systems Development Life Cycle
• BThe Security Project And Management Methodology
• CProject Management System Methodology
• DProject Management Body of Knowledge

• A
  6% (3)
• B
  13% (7)
• C
  4% (2)
• D
  77% (40)

Explanation

Project Management Body of Knowledge (PMBOK) is the correct answer because it is the universally recognized industry standard published by the Project Management Institute (PMI) that defines best practices for project management across all domains, including information security. Information security project managers are expected to follow PMBOK's structured framework of knowledge areas and process groups.

Why the distractors are wrong:

• A (Security Systems Development Life Cycle / SSDLC) is a framework for developing secure software, not for managing projects - it governs the engineering process, not project management methodology.
• B (Security Project And Management Methodology / SPAM) is not a recognized industry standard; it is a fabricated-sounding option designed to distract.
• C (Project Management System Methodology) is similarly not a real, established standard - it blends real-sounding terms without corresponding to any recognized body of knowledge.

Memory tip: Think "PMI = The Bible of Project Management." PMBOK is to project managers what CISSP CBK is to security professionals - the authoritative body of knowledge everyone references. The word "Body of Knowledge" in the name is itself the giveaway that it's the foundational standard.

No community discussion yet for this question.