SSCP · Question #285
Risk reduction in a system development life-cycle should be applied:
The correct answer is D. Equally to all phases. Risk management is a continuous, lifecycle-wide activity. Each SDLC phase introduces its own unique risks: Initiation has requirement risks, Development has coding and design risks, Implementation has configuration and integration risks, Operation has operational and…
Question
Options
- AMostly to the initiation phase.
- BMostly to the development phase.
- CMostly to the disposal phase.
- DEqually to all phases.
How the community answered
(38 responses)- A5% (2)
- C3% (1)
- D92% (35)
Explanation
Risk management is a continuous, lifecycle-wide activity. Each SDLC phase introduces its own unique risks: Initiation has requirement risks, Development has coding and design risks, Implementation has configuration and integration risks, Operation has operational and environmental risks, and Disposal has data remnant risks. Concentrating risk reduction in only one phase leaves the others exposed. Best practice mandates that risk assessment and mitigation be applied equally and consistently across all phases.
Topics
Community Discussion
No community discussion yet for this question.