In software development, which of the following analysis is used to document the services and
functions that have been accidentally left out, deliberately eliminated or still need to be developed?
A.
Gap analysis
B.
Requirement analysis
C.
Cost-benefit analysis
D.
Vulnerability analysis
Explanation:
Gap analysis is used to document the services and functions that have been
accidentally left out, deliberately eliminated or still need to be
developed.
Gap analysis is a tool that helps a company to compare its actual performance with its potential
performance. It is a formal study of what a
business is doing currently and where it wants to go in the future. Gap analysis provides a
foundation for measuring investment of time,
money and human resources required to achieve a particular outcome.
The goal of gap analysis is to identify the gap between the optimized allocation and integration of
the inputs, and the current level of
allocation. This helps provide the company with insight into areas, which could be improved. The gap
analysis process involves determining,
documenting and approving the variance between business requirements and current capabilities.
Answer option D is incorrect. Vulnerability analysis is also known as vulnerability assessment. It is a
process that defines systematic
examination of a critical infrastructure, identifies and classifies the security vulnerabilities in a
computer, network, or communications
infrastructure. In addition, vulnerability analysis forecasts the effectiveness of proposed
countermeasures, identifies the security deficiencies,
evaluates the security alternatives, and verifies the adequacy of such measures after
implementation.
Answer option C is incorrect. A cost benefit analysis is a technique related to the cost effectiveness
of different alternatives in order to see
whether the benefits outweigh the costs. Its aim is to gauge the efficiency of the intervention
relative to the status quo.
To implement cost-effective controls and allocate resources, organizations, after identifying all likely
controls and evaluating their feasibility
and usefulness, must conduct a cost-bene?t analysis. This process must be conducted for each new
or enhanced control to determine if the
control recommended is appropriate for the organization. A cost bene?t analysis mainly determines
the impact of implementing the new or
enhanced control and then determines the impact of not implementing the control.
Answer option B is incorrect. The requirements analysis processes are a collection of processes that
work together to define the stakeholder
requirements, the solution to satisfy the stakeholder, and a definition of the solution in enough
detail that the solution components can be
constructed.