nerdexam
(ISC)2

CSSLP · Question #17

Which of the following process areas does the SSE-CMM define in the 'Project and Organizational Practices' category? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Provide Ongoing Skills and Knowledge C. Manage Project Risk D. Improve Organization's System Engineering Process. The 'Project and Organizational Practices' category within the SSE-CMM defines process areas such as providing ongoing skills and knowledge, managing project risk, and improving the organization's system engineering process.

Secure Software Lifecycle Management

Question

Which of the following process areas does the SSE-CMM define in the 'Project and Organizational Practices' category? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AProvide Ongoing Skills and Knowledge
  • BVerify and Validate Security
  • CManage Project Risk
  • DImprove Organization's System Engineering Process

How the community answered

(23 responses)
  • A
    87% (20)
  • B
    13% (3)

Why each option

The 'Project and Organizational Practices' category within the SSE-CMM defines process areas such as providing ongoing skills and knowledge, managing project risk, and improving the organization's system engineering process.

AProvide Ongoing Skills and KnowledgeCorrect

Provide Ongoing Skills and Knowledge is a process area under 'Project and Organizational Practices' in SSE-CMM, focusing on ensuring personnel have the necessary capabilities.

BVerify and Validate Security

Verify and Validate Security is a process area typically categorized under 'System Security Engineering' or 'Engineering' practices, not 'Project and Organizational Practices', as it relates directly to the technical execution of security within the system.

CManage Project RiskCorrect

Manage Project Risk is a process area under 'Project and Organizational Practices' in SSE-CMM, addressing the identification, analysis, and mitigation of project risks.

DImprove Organization's System Engineering ProcessCorrect

Improve Organization's System Engineering Process is a process area under 'Project and Organizational Practices' in SSE-CMM, focusing on enhancing the overall system engineering capabilities and maturity.

Concept tested: SSE-CMM process areas and categories

Source: https://www.sei.cmu.edu/research-insights/publications/white-papers/1999/99wp003-sse-cmm-version-2.0.html

Topics

#SSE-CMM#Capability Maturity Model#Organizational Security Practices#Security Process Management

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice