L4M2 Exam Dumps : Defining Business Needs

Explanation

According to Andrew Graves, “Through-life Management involves the life-cycle management of the products, services and activities required to deliver a fully integrated capability to the customer, while reducing the cost of ownership for the customer.”

Benefits of through-life asset management can be:

- Lower total life-cycle costs

- Better match between the asset and end-user's needs

- Better supplier capabilities over time because it gains experience of buying organisation's needs.

Explanation

A business case is developed during the early stages of a project and outlines the why, what, how, and who necessary to decide if it is worthwhile continuing a project. One of the first things you need to know when starting a new project are the benefits of the proposed business change and how to communicate those benefits to the business.

Preparing the business case involves an assessment of:

- Business problem or opportunity

- Benefits

- Risk

- Costs including investment appraisal

- Technical solutions

- Timescale

- Impact on operations

- Organizational capability to deliver the project outcomes

These project issues are an important part of the business case. They express the problems with the current situation and demonstrate the benefits of the new business vision. Making business case with multiple options and choices also prompts the procurement and senior management to consider alternatives. As a result, the organisation may opt out the best option.

The business case brings together the benefits, disadvantages, costs, and risks of the current situa-tion and future vision so that executive management can decide if the project should go ahead.

Explanation

This International Standard (ISO 27001:2013) has been prepared to provide requirements for establishing, implementing, maintaining and continually improving an information security management system. The adoption of an information security management system is a strategic decision for an organization. The establishment and implementation of an organization’s information security management system is influenced by the organization’s needs and objectives, security requirements, the organizational processes used and the size and structure of the organization. All of these influencing factors are expected to change over time.

The information security management system preserves the confidentiality, integrity and availability of information by applying a risk management process and gives confidence to interested parties that risks are adequately managed.

It is important that the information security management system is part of and integrated with the organization’s processes and overall management structure and that information security is considered in the design of processes, information systems, and controls. It is expected that an information security management system implementation will be scaled in accordance with the needs of the organization.

This International Standard can be used by internal and external parties to assess the organization's ability to meet the organization’s own information security requirements.

The order in which requirements are presented in this International Standard does not reflect their importance or imply the order in which they are to be implemented. The list items are enumerated for reference purpose only.

ISO/IEC 27000 describes the overview and the vocabulary of information security management systems, referencing the information security management system family of standards (includ-ing ISO/IEC 27003[2], ISO/IEC 27004[3] and ISO/IEC 27005[4]), with related terms and defini-tions.