nerdexam
(ISC)2

CSSLP · Question #111

You are the project manager of QSL project for your organization. You are working with your project team and several key stakeholders to create a diagram that shows how various elements of a system in

The correct answer is D. System or process flowcharts. To understand how system elements interrelate and cause-and-effect mechanisms for risk identification, a project manager would use system or process flowcharts. These diagrams visually represent the steps and decision points in a process, highlighting potential vulnerabilities.

Secure Software Lifecycle Management

Question

You are the project manager of QSL project for your organization. You are working with your project team and several key stakeholders to create a diagram that shows how various elements of a system interrelate and the mechanism of causation within the system. What diagramming technique are you using as a part of the risk identification process?

Options

  • ACause and effect diagrams
  • BInfluence diagrams
  • CPredecessor and successor diagramming
  • DSystem or process flowcharts

How the community answered

(16 responses)
  • A
    6% (1)
  • B
    6% (1)
  • C
    13% (2)
  • D
    75% (12)

Why each option

To understand how system elements interrelate and cause-and-effect mechanisms for risk identification, a project manager would use system or process flowcharts. These diagrams visually represent the steps and decision points in a process, highlighting potential vulnerabilities.

ACause and effect diagrams

Cause and effect diagrams (Ishikawa or fishbone diagrams) are used to identify potential causes of a specific problem, not necessarily to show the interrelation of all system elements and general causation mechanisms.

BInfluence diagrams

Influence diagrams represent decisions, uncertainties, and objectives in a probabilistic framework, primarily used for decision analysis, not a general system interrelation diagram for risk identification.

CPredecessor and successor diagramming

Predecessor and successor diagramming (e.g., in Gantt charts or network diagrams) focuses on the sequence and dependencies of project tasks, not on the interrelation and causation mechanisms of system elements themselves.

DSystem or process flowchartsCorrect

System or process flowcharts visually represent the sequence of operations, steps, or decision points within a system or process, illustrating how various elements interrelate and the flow of information or activities. This technique is valuable in risk identification as it clearly maps out the system's structure and operations, helping to identify potential points of failure, bottlenecks, or vulnerabilities that could lead to risks.

Concept tested: Risk identification techniques - Flowcharts

Source: https://support.microsoft.com/en-us/office/what-is-a-flowchart-341e98d9-2917-47b7-8461-9fcfb5641772

Topics

#Risk Identification#Diagramming Techniques#Process Flow#Project Management

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice