nerdexam
CompTIA

CAS-001 · Question #209

A replacement CRM has had its business case approved. In preparation for a requirements workshop, an architect is working with a business analyst to ensure that appropriate security requirements…

The correct answer is A. Business requirements document. The Business Requirements Document (BRD) is the primary artifact for capturing what the system must do, including security requirements such as data protection, access controls, regulatory compliance (e.g., GDPR, PCI DSS), and audit logging. It is produced early in the project…

Integration of Computing, Communications and Business Disciplines

Question

A replacement CRM has had its business case approved. In preparation for a requirements workshop, an architect is working with a business analyst to ensure that appropriate security requirements have been captured. Which of the following documents BEST captures the security requirements?

Options

  • ABusiness requirements document
  • BRequirements traceability matrix document
  • CUse case and viewpoints document
  • DSolution overview document

How the community answered

(35 responses)
  • A
    94% (33)
  • B
    3% (1)
  • C
    3% (1)

Explanation

The Business Requirements Document (BRD) is the primary artifact for capturing what the system must do, including security requirements such as data protection, access controls, regulatory compliance (e.g., GDPR, PCI DSS), and audit logging. It is produced early in the project lifecycle to define scope and stakeholder needs. A Requirements Traceability Matrix tracks requirements through development but does not originate them. A Use Case and Viewpoints document describes functional scenarios, not requirements. A Solution Overview Document describes the proposed solution at a high level. The BRD is the correct artifact for documenting security requirements before the solution is designed.

Topics

#security requirements#business requirements document#CRM implementation#requirements management

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice