KomFi. Academy

hard · Project Management Professional Hybrid Approaches

Grayling Software is delivering a hybrid cloud-migration. A critical-path security audit in the predictive workstream finds that the adaptive team's latest release uses an encryption key that was accidentally committed to a public GitHub repository.

What should the project manager do first?

  1. Escalate to the Product Owner to determine if the breach is significant enough to pause the project.
  2. Direct the adaptive team to remove the key from the GitHub history and continue the sprint.
  3. Submit a change request to the CCB to extend the security audit duration for future releases.
  4. Immediately rotate all affected keys and initiate a security impact assessment on the migrated data.

Sign up free to see the explanation and track your rank →

More Project Management Professional Hybrid Approaches practice

All Hybrid Approaches questions · Project Management Professional study guide · Project Management Professional glossary · Project Management Professional flashcards