nerdexam
CompTIA

CAS-003 · Question #507

A project manager is working with a software development group to collect and evaluate user scenarios related to the organization's internally designed data analytics tool. While reviewing…

The correct answer is D. SRTM. An SRTM (Security Requirements Traceability Matrix) is specifically designed to map security and compliance requirements back to their originating stakeholders, user scenarios, and regulatory obligations. It provides a formal, auditable linkage between stakeholder needs and…

Risk Management

Question

A project manager is working with a software development group to collect and evaluate user scenarios related to the organization's internally designed data analytics tool. While reviewing stakeholder input, the project manager would like to formally document the needs of the various stakeholders and the associated organizational compliance objectives supported by the project. Which of the following would be MOST appropriate to use?

Options

  • ARoles matrix
  • BPeer review
  • CBIA
  • DSRTM

How the community answered

(55 responses)
  • A
    5% (3)
  • B
    4% (2)
  • C
    2% (1)
  • D
    89% (49)

Explanation

An SRTM (Security Requirements Traceability Matrix) is specifically designed to map security and compliance requirements back to their originating stakeholders, user scenarios, and regulatory obligations. It provides a formal, auditable linkage between stakeholder needs and compliance objectives - exactly what the project manager needs. A roles matrix only maps responsibilities to people. Peer review is a quality evaluation process. A BIA (Business Impact Analysis) assesses the impact of disruptions on business functions, not stakeholder requirements.

Topics

#SRTM#requirements traceability#compliance documentation#stakeholder management

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice