CAS-001 · Question #211
A new project initiative involves replacing a legacy core HR system, and is expected to touch many major operational systems in the company. A security administrator is engaged in the project to…
The correct answer is C. Communicate the security requirements with all stakeholders for discussion and buy-in. After a security administrator establishes security requirements for a major project, the next logical step is to communicate those requirements to ALL stakeholders for discussion and buy-in. Security requirements that affect multiple operational systems must be understood and…
Question
A new project initiative involves replacing a legacy core HR system, and is expected to touch many major operational systems in the company. A security administrator is engaged in the project to provide security consulting advice. In addition, there are database, network, application, HR, and transformation management consultants engaged on the project as well. The administrator has established the security requirements. Which of the following is the NEXT logical step?
Options
- ADocument the security requirements in an email and move on to the next most urgent task.
- BOrganize for a requirements workshop with the non-technical project members, being the HR and
- CCommunicate the security requirements with all stakeholders for discussion and buy-in.
- DOrganize for a requirements workshop with the technical project members, being the database,
How the community answered
(29 responses)- A7% (2)
- B3% (1)
- C79% (23)
- D10% (3)
Explanation
After a security administrator establishes security requirements for a major project, the next logical step is to communicate those requirements to ALL stakeholders for discussion and buy-in. Security requirements that affect multiple operational systems must be understood and accepted by everyone involved - technical and non-technical alike - before work proceeds. Option A (emailing and moving on) is dismissive and bypasses collaboration. Options B and D each exclude half the stakeholder group, which is insufficient. Broad stakeholder communication ensures alignment, surfaces conflicts early, and creates shared ownership of the requirements.
Topics
Community Discussion
No community discussion yet for this question.