CRISC: Certified Risk and Information Systems Control Exam - Primary Steps to Initialize the Project

Primary Steps to Initialize the Project

Prev Question Next Question

Question

What are the three PRIMARY steps to be taken to initialize the project? Each correct answer represents a complete solution.

(Choose three.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

ABC.

Projects are initiated by sponsors who gather the information required to gain approval for the project to be created.

Information often compiled into the terms of a project charter includes the objective of the project, business case and problem statement, stakeholders in the system to be produced, and project manager and sponsor.

Following are the steps to initiate the project: -> Conduct a feasibility study: Feasibility study starts once initial approval has been given to move forward with a project, and includes an analysis to clearly define the need and to identify alternatives for addressing the need.

A feasibility study involves: - Analyzing the benefits and solutions for the identified problem area - Development of a business case that states the strategic benefits of implementing the system either in productivity gains or in future cost avoidance and identifies and quantifies the cost savings of the new system.

- Estimation of a payback schedule for the cost incurred in implementing the system or shows the projected return on investment (ROI) -> Define requirements: Requirements include: - Business requirements containing descriptions of what a system should do - Functional requirements and use case models describing how users will interact with a system - Technical requirements and design specifications and coding specifications describing how the system will interact, conditions under which the system will operate and the information criteria the system should meet.

-> Acquire software: Acquiring software involves building new or modifying existing hardware or software after final approval by the stakeholder, which is not a phase in the standard SDLC process.

If a decision was reached to acquire rather than develop software, this task should occur after defining requirements.

Incorrect Answers: D: Risk management is planned latter in project development process, and not during initialization.

The three primary steps to be taken to initialize a project are:

  1. Conduct a Feasibility Study: Before starting any project, a feasibility study must be conducted to determine if the project is viable, achievable, and worth the investment of time, resources, and money. A feasibility study helps to identify the potential risks, benefits, and challenges of the project, and to determine if the project aligns with the organization's goals, objectives, and strategies. The study should also identify the scope of the project, its goals, and its expected outcomes.

  2. Define Requirements: Once the feasibility study is completed and the project is determined to be viable, the next step is to define the requirements of the project. Requirements are the specific needs, expectations, and outcomes that the project must achieve. Requirements are typically documented in a project charter, which outlines the project's purpose, scope, objectives, deliverables, and stakeholders. The requirements should be clear, concise, measurable, and achievable, and should align with the organization's goals and strategies.

  3. Plan Risk Management: The final primary step to take to initialize a project is to plan risk management. This involves identifying, assessing, and managing the risks associated with the project. Risks are events or circumstances that could have a negative impact on the project's success, such as delays, budget overruns, quality issues, and scope creep. Risk management planning involves developing strategies to mitigate, avoid, or transfer risks, and establishing contingency plans in case of unexpected events. Risk management should be an ongoing process throughout the project's lifecycle, and should involve all stakeholders to ensure that risks are effectively managed.

Therefore, the correct answers to the question are A. Conduct a feasibility study, B. Define requirements, and D. Plan risk management.