In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed?
- Gap analysis
- Requirement analysis
- Cost-benefit analysis
- Vulnerability analysis
Answer(s): A
Explanation:
Gap analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed.
Gap analysis is a tool that helps a company to compare its actual performance with its potential performance. It is a formal study of what a business is doing currently and where it wants to go in the future. Gap analysis provides a foundation for measuring investment of time, money and human resources required to achieve a particular outcome. The goal of gap analysis is to identify the gap between the optimized allocation and integration of the inputs, and the current level of allocation. This helps provide the company with insight into areas, which could be improved. The gap analysis process involves determining, documenting and approving the variance between business requirements and current capabilities. Answer option D is incorrect. Vulnerability analysis is also known as vulnerability assessment. It is a process that defines systematic examination of a critical infrastructure, identifies and classifies the security vulnerabilities in a computer, network, or communications infrastructure. In addition, vulnerability analysis forecasts the effectiveness of proposed countermeasures, identifies the security deficiencies, evaluates the security alternatives, and verifies the adequacy of such measures after implementation.
Answer option C is incorrect. A cost benefit analysis is a technique related to the cost effectiveness of different alternatives in order to see whether the benefits outweigh the costs. Its aim is to gauge the efficiency of the intervention relative to the status quo.
To implement cost-effective controls and allocate resources, organizations, after identifying all likely controls and evaluating their feasibility and usefulness, must conduct a cost-benenifit analysis. This process must be conducted for each new or enhanced control to determine if the control recommended is appropriate for the organization. A cost benenifit analysis mainly determines the impact of implementing the new or enhanced control and then determines the impact of not implementing the control. Answer option B is incorrect. The requirements analysis processes are a collection of processes that work together to define the stakeholder requirements, the solution to satisfy the stakeholder, and a definition of the solution in enough detail that the solution components can be constructed.