Information Technology Control and Audit, 5e (Otero)
Chapter 7—Project Management
MULTIPLE CHOICES, TRUE/FALSE, AND DISCUSSION QUESTIONS
1. Explain what project management refers to.
Answer:
Project management identifies, establishes, coordinates, and monitors activities, tasks, and resources for a
project to produce the product or services meeting the requirements. Effectively controlling projects
requires a disciplined approach or process to project initiation, execution, implementation, and postimplementation. This includes having the right people involved, following standard project management
processes, and using a set of project management tools for effective execution. Project management
describes controls over managing projects that satisfy organizational business requirements.
Objective: Learning Objective 1
2. Based on COBIT, project management controls over managing projects:
a. Provide a structure for defining requirements and developing applications
b. Are focused on project scope, schedule, and budget
c. Are focused on the analysis, construction, and testing of applications
d. Provide a structure for evaluating IT investments
Answer: b
Objective: Learning Objective 1
3. Based on COBIT, project management controls over managing projects typically consider:
a. Budgets and balancing internal and external resources
b. Quality assurance plans and methods
c. Program and project risk assessments
d. All of the above
Answer: d
Objective: Learning Objective 1
4. True or False: Project management has often been described as part art and part science. The art side
involves implementing the right project governance and project management life cycle, and integrate
these two elements with the appropriate project management methodology.
Answer: False
Objective: Learning Objective 1
5. True or False: Project management has often been described as part art and part science. The science
side involves the human element, the experience project managers bring to the project, support from
management, etc.
Answer: False
Objective: Learning Objective 1
6. Which is not one of the seven best practices for an effective project management office (PMO),
according to the Gartner Group?
a. Identify and Execute High-Impact, High-Visibility Initiatives
b. Perform an IT risk assessment
c. Provide Senior Managers with Simple, Unambiguous Information
d. Highlight the PMO's Achievements
Answer: b
Objective: Learning Objective 1
7. Which is not one of the seven best practices for an effective project management office (PMO),
according to the Gartner Group?
a. Acquire the Right People, Knowledge, Skills and Collaborative Behaviors
b. Build a Framework that Shows How the PMO Aligns with Strategic Enterprise Objectives
c. Communicate project results to Audit Committee
d. Provide Senior Managers with Simple, Unambiguous Information
Answer: c
Objective: Learning Objective 1
8. According to the Gartner Group, one of the seven best practices for an effective project management
office (PMO) is to “evolve the PMO to support bimodal IT and digital business”. Explain what does this
mean.
Answer:
Effective PMO's must continuously reassess (and adapt) their service model, processes, and capabilities to
ensure consistency with current goals, objectives, direction, and needs of the organization. PMO's that
were focused on cost reduction and efficiency several years ago, may now need to shift gears to flexibility
and delivery speed, for example.
Objective: Learning Objective 1
9. What is the primary standards organization for project management?
a. Project Management Incorporated
b. Portfolio Management Institute
c. Project Management Institute
d. Program Management Institute
Answer: c
Objective: Learning Objective 2
10. Describe the purpose of the primary standards organization for project management.
Answer:
The primary standards organization for project management is the Project Management Institute (PMI)
delivers value to professionals through global advocacy, collaboration, education, and research. The PMI's
globally-recognized standards as well as its certifications, tools, academic research, professional
development courses, and networking opportunities have been key in the development and maturity of the
of project management profession.
Objective: Learning Objective 2
11. The Project Management Body of Knowledge (PMBOK) includes knowledge of innovative and
advanced practices within the project management profession. What type of information is specifically
included?
a. Practice Standards
b. Practice Guides
c. Foundational Standards
d. All of the above
Answer: d
Objective: Learning Objective 2
12. What type of information is included in the Project Management Body of Knowledge (PMBOK)?
a. Project Risk Assessments
b. Employee Task Breakdowns
c. Audit Fieldwork Standards
d. Lexicon of Project Management Terms
Answer: d
Objective: Learning Objective 2
13. Describe what information is included within the Project Management Body of Knowledge
(PMBOK).
Answer:
Included within the PMBOK are:
▪ Foundational Standards - reflect the continually evolving profession;
▪ Practice Standards - describe the tools, techniques, processes, and/or procedures identified in the
PMBOK or other foundational standards;
▪ Practice Guides - provide supporting information and assistance when applying PMI standards; and
▪ Lexicon of Project Management Terms - provide clear and concise definitions to project, program
and portfolio management terms in order to improve understanding and consistent use of
terminology
Objective: Learning Objective 2
14. True or False: ISACA defines methodology as a "system of practices, techniques, procedures and
rules used by those who work in a discipline."
Answer: False
Objective: Learning Objective 2
15. Frequently used methodologies in the project management practice include?
a. PRojects IN Controlled Environments (PRINCE2)
b. Projects integrating Sustainable Methods (PRiSM)
c. Portfolio, Program, and Project Management (PPPM)
d. All of the above
Answer: d
Objective: Learning Objective 2
16. Frequently used methodologies in the project management practice include all of these except?
a. Critical Chain / Path
b. NIST PM
c. Adaptive
d. HERMES
Answer: b
Objective: Learning Objective 2
17. Frequently used methodologies in the project management practice include all of these except?
a. Traditional
b. Waterfall
c. Enterprise Risk Management Framework
d. Agile
Answer: c
Objective: Learning Objective 2
18. Common features to look for when selecting a project management methodology include?
a. Organizational goals, objectives, direction
b. Project constraints
c. Project stakeholders
d. All of the above
Answer: d
Objective: Learning Objective 2
19. Effective project management ensures that
a. Processes are explicitly defined, managed, measured, controlled, and effective
b. Applications are designed, developed, and implemented
c. Project tasks are defined, and resources are available and completed on time and within budget
d. The project has included all the costs of the technology solution
Answer: c
Objective: Learning Objective 3
20. List the success factors for effective project management.
Answer:
Project management success factors include: adequate planning, resource management, oversight and
tracking, effective employment of management tools, and certification.
Objective: Learning Objective 3
21. When managing resources, one of the challenges for the project manager is making sure that:
a. Deliverables are produced successfully and in a timely fashion.
b. Management is being communicated with and sufficiently involved.
c. The end user is involved and takes delivery of the agreed-to project results.
d. All of the above.
Answer: d
Objective: Learning Objective 3
22. Challenges the project manager when managing resources (i.e., team members) involves making sure
that all of the following are in place except?
a. Right resources, such as, money, people, and facilities are available at the right time.
b. Effective use of tools to measure project performance
c. Project tasks are prioritized to prevent interference with other projects’ due dates.
d. Management is being communicated with and sufficiently involved.
Answer: b
Objective: Learning Objective 3
23. Project management tools allow the manager to
a. Track metrics for measuring third-party vendors
b. Help determine which vendor products to use
c. Provide a process for governing investments in IT
d. Define tasks, dependencies, and track progress
Answer: d
Objective: Learning Objective 3
24. Project management tools include
a. Microsoft Project
b. Deltek’s Open Plan
c. CPM or PERT
d. All of the above
Answer: d
Objective: Learning Objective 3
25. True or False: The Project Management Professional (PMP) Certification, a globally recognized
certification offered by the PMI, validates the project manager's knowledge, experience, and skills in
bringing projects to successful completion.
Answer: True
Objective: Learning Objective 3
26. The project management areas assessed by the globally-known PMP Certification include the
following except?
a. Auditing
b. Initiating
c. Planning
d. Closing
Answer: a
Objective: Learning Objective 3
27. One of the project management areas assessed by the globally-known PMP Certification includes?
a. Auditing
b. Project Management Standards
c. Monitor and Control
d. Project Management Resource Assessments
Answer: c
Objective: Learning Objective 3
28. Program management brings all the pieces of a major program together and includes:
a. Defining program management framework
b. Establishing consistent project management practices
c. Implementing technology for managing projects
d. All of the above
Answer: d
Objective: Learning Objective 4
29. True or False: One of the components of program management includes “creating a program
management office”.
Answer: True
Objective: Learning Objective 4
30. What is the difference between program and project management? How does program management
puts all program pieces together?
Answer:
Program management is the process required to coordinate multiple related projects with the purpose of
delivering business benefits of strategic importance. Today's complex applications (i.e., enterprise resource
planning systems) integrate requirements and functionality from multiple groups and multiple applications.
Most new applications also require action from various functions within IT (e.g., software development,
network engineering, security, production support, etc.). Program management brings all the pieces of a
major program together by:
▪ Defining a program management framework
▪ Creating a program management office
▪ Setting staffing requirements, processes, and metrics
▪ Establishing consistent project management practices
▪ Implementing technology for managing projects
Objective: Learning Objective 4
31. Key tasks for the auditor during a project management review are
a. Check project management tools for proper usage
b. Assess readiness for implementation
c. Maintain independence to remain objective
d. All of the above
Answer: d
Objective: Learning Objective 5
32. Briefly describe the three steps auditors should do in order to determine their level of involvement in a
project management audit.
Answer:
In order to determine the level of involvement in a project management audit, auditors should first
complete a (1) risk assessment of the project development process and determine the amount of time to be
allocated to a particular project. Next, the auditor should develop an (2) audit plan that includes a
schedule for the specific review points tied to the project schedule. Finally, the auditor needs to (3)
communicate the scope of involvement and any findings to the project manager, users, and IT
management.
Objective: Learning Objective 5
33. During the planning phase, the auditor can
a. Review project deliverables to identify control weaknesses
b. Review project management processes for appropriateness
c. Facilitate communication between the project team and senior management
d. Facilitate communication between functions and raise issues
Answer: d
Objective: Learning Objective 5
34. The audit plan would include a project management process review to
a. Assess the adequacy of the control environment for managing projects
b. Ensure the right solution is selected that integrates with other technology components
c. Ensure clearly defined requirements in the request for proposal
d. Ensure projects are completed on time, on budget, and with full functionality
Answer: a
Objective: Learning Objective 5
35.When determining involvement in a project management audit, which of the following would not be a
process risk?
a. Processes are explicitly defined, managed, measured, controlled, and effective
b. Lack of strategic direction
c. Lack of project management standards
d. Negative organizational climate
Answer: a
Objective: Learning Objective 5
36. When determining involvement in a project management audit, which of the following would not be a
project risk?
a. Review of project deliverables to identify control weaknesses
b. Inexperienced staff
c. Lack of management commitment
d. Project complexity and magnitude
Answer: a
Objective: Learning Objective 5
37. Challenges of big data to organizations, including project managers, auditors, etc., include
a. Data analysis and capture
b. Data sharing, storage, and transfer
c. Scarcity of available and qualified personnel
d. All of the above
Answer: d
Objective: Learning Objective 6
38. Challenges of big data to organizations, including project managers, auditors, etc., include
a. Timely integration of analytics into the audit
b. Data visualization, querying, and updating
c. Data curation and search
d. All of the above
Answer: d
Objective: Learning Objective 6
39. True or False: According to the Project Management Institute (PMI), big data "describes large
volumes of high velocity, complex and variable data that require advanced techniques and technologies to
enable the capture, storage, distribution, management, and analysis of the information.”
Answer: False
Objective: Learning Objective 6
40. Briefly describe at least five essential skills for big data project managers.
Answer:
Essential skills include: Cross-functional team management experience; Ability to see the big picture; Datadriven thinking; Ability to deal with ambiguity; Technical skills; Process development skills; Soft skills;
and Business acumen. Refer to Exhibit 7.4 for a description of these essential skills.
Objective: Learning Objective 6
* * * * *