New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

BCS BAPv5 Exam - Topic 8 Question 10 Discussion

Actual exam question for BCS's BAPv5 exam
Question #: 10
Topic #: 8
[All BAPv5 Questions]

A business analyst and a project manager are producing a business case for an initiative, which aims to improve the cyber defences of a large financial services provider

They met recently to review progress and made the following notes for the next draft

1. The benefits of cyber security will be hard to describe in quantitative terms, so we will need to describe these qualitatively.

2 We need to make it clear that we have fully explored the solution market, and we have considered a range of approaches to meeting the

objectives of this project.

3. The threat posed to the organisation from cyber attack, and therefore the justification for this project, needs to be clearly articulated

Which THREE sections of a business case will cover these points'?

Show Suggested Answer Hide Answer
Suggested Answer: D

The parts of the Business Change lifecycle that the business analyst will have supported are Realisation, Design and Implementation. Realisation is the phase where the benefits defined in the benefits plan are evaluated and measured. The business analyst will support this phase by assisting in the evaluation of the benefits (a). Design is the phase where the elements that will support the change are defined and developed. The business analyst will support this phase by leading requirements elicitation and clarification activities (b). Implementation is the phase where the change is embedded into the organisation and its processes. The business analyst will support this phase by delivering coaching, training and ongoing support for any changes to existing processes .


Business Change Lifecycle - YouTube

The Change Management Life Cycle; Involve Your People to Ensure Success ...

Contribute your Thoughts:

0/2000 characters
Jutta
3 months ago
"Description of the current situation" is key to set the context for all this.
upvoted 0 times
...
Erin
3 months ago
"Options considered" should cover the solution market exploration part.
upvoted 0 times
...
Fannie
3 months ago
Surprised they think qualitative benefits are enough! That's a tough sell.
upvoted 0 times
...
Nathalie
4 months ago
I agree, but "Analysis of costs and benefits" is also crucial for showing value.
upvoted 0 times
...
Roxane
4 months ago
Definitely need the "Risk assessment" section for the cyber threat justification.
upvoted 0 times
...
Jolene
4 months ago
I feel like "Description of the current situation" could help articulate the threat posed by cyber attacks, but I’m not entirely confident about my choices.
upvoted 0 times
...
Brice
4 months ago
For the solution market exploration, I think "Options considered" is relevant, but I’m a bit uncertain about the third section.
upvoted 0 times
...
Leslee
4 months ago
I remember a practice question that focused on articulating threats, so I feel like "Risk assessment" should be one of the sections we need to choose.
upvoted 0 times
...
Josue
5 months ago
I think the "Analysis of costs and benefits" section would definitely cover the qualitative benefits of cyber security, but I'm not sure about the others.
upvoted 0 times
...
Harrison
5 months ago
Okay, let's see. The first point is about describing the benefits of cyber security qualitatively, so that would likely be covered in the "Analysis of costs and benefits" section. The second point is about exploring the solution market, which would probably be in the "Options considered" section. And the third point is about articulating the threat, which would likely be in the "Description of the current situation" section. I think I've got this!
upvoted 0 times
...
Floyd
5 months ago
Hmm, I'm a bit unsure about this one. The question is asking about specific sections of the business case, but the information provided is a bit vague. I'll need to think this through carefully.
upvoted 0 times
...
Nelida
5 months ago
This seems like a straightforward question. The key is to identify the sections of the business case that cover the points mentioned in the exam question.
upvoted 0 times
...
Yoko
5 months ago
I'm a little confused by the wording of the question. It's asking about specific sections of the business case, but the information provided doesn't seem to directly map to those sections. I'll need to re-read the question and the options carefully to make sure I understand what they're looking for.
upvoted 0 times
...
Rosendo
5 months ago
Hmm, I'm a bit unsure about this one. I'm debating between "Search" and "Search button" - both seem like reasonable options to me.
upvoted 0 times
...
Nina
5 months ago
This is a good question to test our understanding of the theft triangle. I'll go with C - motive, desire, and opportunity seem to capture the key elements that enable theft to occur.
upvoted 0 times
...
Vinnie
5 months ago
I'm a bit confused between the options. Pairwise testing and classification tree method don't seem to be directly related to the problem at hand. State transition testing could be a possibility, but I'm not sure if it's the best fit. I think I'll go with Equivalence Partitioning extended by boundary value analysis, as it seems to be the most targeted approach.
upvoted 0 times
...
Gladis
10 months ago
I'd say they've got the right idea, but they better make sure their 'qualitative' descriptions are rock solid. No fluff allowed in a business case!
upvoted 0 times
Ena
9 months ago
A: Agreed, we need to show that we fully explored the solution market and considered different approaches.
upvoted 0 times
...
Simona
9 months ago
B: Definitely, we have to be clear and concise in the business case.
upvoted 0 times
...
Dortha
10 months ago
A: We need to make sure our qualitative descriptions are solid, no fluff allowed.
upvoted 0 times
...
...
Audrie
10 months ago
Haha, good luck trying to put a number on 'cyber defences'! That's like trying to quantify 'keeping the unicorns away'.
upvoted 0 times
Verlene
8 months ago
B: Agreed, we should consider a range of approaches to meeting the project objectives.
upvoted 0 times
...
Celestine
9 months ago
A: We also need to make sure we explore the solution market thoroughly.
upvoted 0 times
...
Mireya
9 months ago
B: Yes, it will be challenging to quantify the benefits of cyber security.
upvoted 0 times
...
Joanna
10 months ago
A: We need to focus on describing the benefits qualitatively.
upvoted 0 times
...
...
Sherman
10 months ago
I also think that describing the current situation is important to justify the project. So, I would include section C as well.
upvoted 0 times
...
Mozell
10 months ago
I agree with Avery. We need to analyze costs and benefits, provide recommendations, and assess the risks.
upvoted 0 times
...
Avery
10 months ago
I think the sections that cover these points are B, D, and E.
upvoted 0 times
...
Lenita
10 months ago
I agree, those three sections make the most sense. Though I'm wondering how they plan to quantify the cyber security benefits - might be a tricky one!
upvoted 0 times
Jeanice
9 months ago
B: Yeah, quantifying the cyber security benefits might be a challenge, but we can focus on qualitative descriptions instead.
upvoted 0 times
...
Cherry
10 months ago
A: I think options considered, analysis of costs and benefits, and risk assessment will cover those points.
upvoted 0 times
...
Sheridan
10 months ago
B: Yeah, I agree. Quantifying the cyber security benefits will definitely be a challenge.
upvoted 0 times
...
Salena
10 months ago
A: I think options considered, analysis of costs and benefits, and risk assessment will cover those points.
upvoted 0 times
...
...
Suzan
10 months ago
I also think that including options considered in the business case would help demonstrate that we have thoroughly researched and explored different approaches to improving cyber defences.
upvoted 0 times
...
Daron
10 months ago
The key sections here are Options considered, Analysis of costs and benefits, and Risk assessment. This covers exploring the market, quantifying the benefits, and articulating the threat justification.
upvoted 0 times
...
Verona
10 months ago
I agree with Yaeko. It's important to show the financial impact, the current state of cyber defences, and the potential risks involved in the project.
upvoted 0 times
...
Yaeko
11 months ago
I think the sections that will cover these points are B) Analysis of costs and benefits, C) Description of the current situation, and E) Risk assessment.
upvoted 0 times
...

Save Cancel