A new project initiative involves replacing a legacy core HR system, and is expected to touch
many major operational systems in the company. A security administrator is engaged in the
project to provide security consulting advice. In addition, there are database, network, application,
HR, and transformation management consultants engaged on the project as well. The
administrator has established the security requirements. Which of the following is the NEXT logical
step?
A.
Document the security requirements in an email and move on to the next most urgent task.
B.
Organize for a requirements workshop with the non-technical project members, being the HR
and transformation management consultants.
C.
Communicate the security requirements with all stakeholders for discussion and buy-in.
D.
Organize for a requirements workshop with the technical project members, being the database,
network, and application consultants.