CRISC Certified in Risk and Information Systems ControlInformation Technology and SecurityMedium
A company is implementing a new enterprise resource planning (ERP) system. The project manager is tasked with ensuring that all necessary security requirements are identified and integrated throughout the project lifecycle. Which of the following project management concepts is MOST relevant to this task?
- ARisk Management
- BScope Management
- CStakeholder Management
- DQuality Management
Show answer & explanationAnswer & explanation
Correct answer: B. Scope Management
Scope management is the process of defining what work is required and what is not required to complete the project. Integrating security requirements ensures they are part of the defined project scope, preventing them from being overlooked or treated as out-of-scope later.
Why the other options are wrong
- A. While risk management identifies security risks, scope management ensures the *requirements* to address those risks are part of the project.
- C. Stakeholder management involves engaging stakeholders, but scope management defines the actual work being done.
- D. Quality management focuses on meeting specified requirements, but scope management defines what those requirements are.
Scope Management (Project Management)
The process of defining and controlling what is and is not included in the project. It ensures that the project team and stakeholders have a shared understanding of project deliverables and the work required to produce them.
- Defines project boundaries.
- Prevents scope creep.
- Crucial for successful project delivery.
Memory trick: Plan, Execute, Control: The project lifecycle.