timebox

A brief, predetermined time limit allocated to finish a specific set of work.

Key Points

  • The duration is fixed; scope is adjusted to fit the timebox.
  • Encourages focus, prioritization, and a predictable delivery cadence.
  • Common uses include iterations/sprints, spikes, and timeboxed meetings.
  • At the end, deliver what is done; unfinished work is re-planned without extending the timebox.

Example

A team uses a two-week timebox for a sprint. They select top-priority backlog items that fit the two weeks. When the two weeks end, they stop, review what is complete, and move any unfinished items back to the backlog for future planning.

PMP Example Question

As a one-week timebox ends, one user story remains partially complete. What should the project team do?

  1. Extend the timebox by one day to finish the story.
  2. Keep the timebox end date and return the unfinished work to the backlog for re-planning.
  3. Add temporary resources to complete the story before the timebox ends.
  4. Work overtime to meet the original scope within the same timebox.

Correct Answer: B — Keep the timebox fixed and re-plan unfinished work

Explanation: Timeboxes have fixed durations; scope is the variable. Unfinished work should be re-estimated and scheduled later, not extend the timebox.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Run the drill before the incident runs you

Design, run and prove OT drills and tabletop exercises before an incident tests your team. OT Incident Drills and Exercises includes 24 lessons and practical exercise materials, delivered through HKSM Courses for US$47 one-time. 30-day money-back guarantee when 50% or less of the course has been consumed.

Explore the Course