Which analysis technique is used to identify and mitigate risks associated with a vendor's development and testing processes?

Which analysis technique is used to identify and mitigate risks associated with a vendor's development and testing processes?

• A. SWOT
• B. PERT
• C. Critical Path
• D. Process Risk Analysis

Answer: (D)

Identifying and reducing risks in a vendor’s development and testing processes is addressed by Process Risk Analysis. This approach systematically examines each step in the vendor’s lifecycle, identifying potential failure modes, their causes, and their effects, then evaluating risk levels to prioritize where controls are needed. It helps you specify concrete mitigations—such as required coding standards, thorough testing, independent reviews, and robust change management—to lower the chances and impact of defects or delays. In contrast, SWOT is a broad strategic tool that looks at strengths, weaknesses, opportunities, and threats rather than focusing on the detailed risks within supplier processes, and scheduling methods like PERT or Critical Path are about timelines and task dependencies, not risk identification and mitigation in development and testing.

Identifying and reducing risks in a vendor’s development and testing processes is addressed by Process Risk Analysis. This approach systematically examines each step in the vendor’s lifecycle, identifying potential failure modes, their causes, and their effects, then evaluating risk levels to prioritize where controls are needed. It helps you specify concrete mitigations—such as required coding standards, thorough testing, independent reviews, and robust change management—to lower the chances and impact of defects or delays. In contrast, SWOT is a broad strategic tool that looks at strengths, weaknesses, opportunities, and threats rather than focusing on the detailed risks within supplier processes, and scheduling methods like PERT or Critical Path are about timelines and task dependencies, not risk identification and mitigation in development and testing.