ITPEC IP April 2018 Question 40

Topic: Security

In order to promote risk management, the execution plan for introducing the risk management system was developed as the first step. When the subsequent actions are divided into steps A through C below, which of the following is the order of the steps in accordance with the PDCA cycle?

AImplementing the measures against risks according to the execution planBMeasuring the effect of the implementation and evaluating the effectiveness of the risk management systemCTaking corrective actions and improving the risk management system

Explanation

A → B → C — after the plan, the PDCA cycle runs Do, Check, Act.

The execution plan is the Plan step, already done. Then:

  • •Do: A Implement the measures against risks according to the plan.
  • •Check: B Measure the effect and evaluate how well the system works.
  • •Act: C Take corrective action and improve the system, based on the evaluation.

Answer (a)

Why not others:

  • •(b) A → C → B — corrects before evaluating, so there is no finding to act on
  • •(c) C → A → B — improves the system before anything has been implemented or measured
  • •(d) C → B → A — runs the cycle backwards, evaluating before implementing

Key rule: Improvement (Act) always follows evaluation (Check), which in turn needs something implemented (Do) to measure.

Security · AI-written, may contain errors

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.