CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ217

Secure Software Supply Chain

Harry is the project manager for the MMQ Construction Project. He has identified a supplier who can create stained-glass windows for 1,000 window units in the construction project. The supplier is an artist who works alone but produces windows for several companies throughout the United States.

Management reviews the proposal to use this supplier. Although they agree that the supplier is talented, they do not believe the artist can complete the 1,000 window units in time to meet the project deadline. Management asks Harry to find a supplier who can complete the windows by the required date in the schedule. Which risk response has management asked Harry to implement?

  • A Transference
  • B Avoidance
  • C Mitigation
  • D Acceptance
Explanation

Risk avoidance eliminates a threat by changing the plan so the threat no longer affects the project objective. Selecting a supplier with sufficient capacity to meet the required completion date removes the schedule risk created by relying on the single artist.

Community Discussion

No comments yet. Be the first to start the discussion!