5.1 Define Compliance 2. Evaluate & Deliver

Question 1

How

Answer 1

1. Confirm compliance requirements
2. Determine actions to address compliance
3. Classify compliance categories
4. Determine potential threats
5. Support compliance
6. Analyze consequences of non-compliance
7. Measure compliance

Question 2

1. Confirm compliance requirements
2. Determine actions to address compliance
3. Classify compliance categories
4. Determine potential threats
5. Support compliance
6. Analyze consequences of non-compliance
7. Measure compliance

Answer 2

T&T
1. ISO Standards
2. Configuration mgmt
3. 5 Pillars of compliance
-Documentation
-Compliance council
-Compliance risk
-Compliance audit
-Compliance responsibilities

4. Expert Judgement
5. Risk breakdown Structure (RBS)
6. Cost of Quality (CoQ)
7. Update product log

D&A
1. Compliance Documentation
2. Quality mgmt plan
3. Risk Register

Question 3

2. Determine actions to address compliance

Answer 3

T&T
1. Audits
2. Risk Identifications & Analysis / Risk Register
3. Update Product log

D&A
1. Risk Mgmt Plan

Question 4

3. Classify compliance categories
   -Environmental Risk
   -Workplace health and safety
   -Corrupt practices
   -Social responsibility
   -Quality
   -Process Risks

Answer 4

T&T
1. Configuration mgmt
2. Expert Judgement
3. Risk breakdown Structure (RBS)

D&A
1. Project mgmt plan

Question 5

4. Determine potential threats
   -New Vulnerabilities
   -Changes in legal or regulatory requirements
   -Errors in testing and validation to confirm compliance
   -Errors or bugs in deliverables
   -Lack of awareness of compliance requirements

Answer 5

T&T
1. Risk Register
2. Compliance Planning
3. Sprint Review

D&A
1. Quality mgmt plan
2. Risk mgmt plan

Question 6

5. Support compliance

Answer 6

T&T
1. Execution Reports
2. Variance Analysis for compliance
3. Tolerance Analysis
4. Community of Practice (CoP)

D&A
1. Risk Mgmt plan

Question 7

6. Analyze consequences of non-compliance

Answer 7

T&T
1. Risk Register
2. Cost of Quality (CoQ)
3. Benefit-Cost Ratio

D&A
1. Risk mgmt Plan

Question 8

7. Measure compliance

Answer 8

T&T
1. Data Gathering & Analysis
-Variance analysis for compliance
-Tolerance analysis
-Audits
-Statistical sampling

D&A
1. Risk mgmt Plan
2. Variance Analysis Report