Trade-Off Studies

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
or

Already have an account? Sign In »

Time
5 hours 58 minutes
Difficulty
Intermediate
CEU/CPE
6
Video Transcription
00:00
Welcome back to cyber is it's of course I'm your instructor, Brad Roads. Let's talk about trade off studies.
00:05
So here's what we're gonna cover in this video. We're gonna talk about the two parts of trade offs.
00:09
We're gonna talk about considerations you should have in trade offs, and they're probably gonna be familiar to you. And we're gonna do a quick example of a trade off.
00:17
So there are two parts when we talk about tradeoffs. One is the alternatives. And those are the choices between, say, a technical solution and a non technical solution.
00:27
You might say, Well, Brad,
00:29
alternatives and solutions sound like pretty much the same word with the same definition, but they're not. So
00:35
once you have major choice in alternatives, then we go and look to the solutions. What are the means we're going to do to solve a particular problem or issue that we have? And so you have toe make the choice of alternatives. First, you have to do that course of action analysis if you will,
00:54
and determine which way you're going to go,
00:56
and then you have to go through and look at those solutions based on the considerations we're gonna talk about. So, tradeoff studies air all about balance. You might have direction from the top That says your alternative is going to be a technical solution.
01:10
Well, and if you get that choice made for you, then you just jump right into the solution space and determine what is the best thing to do to fix that problem.
01:19
So tradeoff considerations. You've seen all of these before? Remember our cost schedule scope triangle that I told you you should memorize for the s up content. Well, here it is again. Obviously, when we think about tradeoffs, cost is huge. If you don't have a lot of money, guess what? You're not gonna buy the Cadillac
01:36
when we talk about schedule. If you are need a car tomorrow and you really want the the Tesla's cyber truck and it's not gonna be available for three years, they probably don't make your schedule,
01:48
um, scope or performance. Right? Um, let's say that you need a family car and your toe and you're thinking about a Lamborghini. Well, guess what? That's probably not gonna meet your scope. So all of those things are tradeoff, considerations, theme, other trade off considerations. that Theis he brings to the table is risk. We need to look at the risk to
02:07
cost schedule scope,
02:08
and I mean to look into the risk of the organization is the whole. Remember the three layers we talked about in risk, where we have the organization level, that we have a mission, business process level on that we have this system level. We have to consider risks in all of those when we do trade offs.
02:22
So let's do a quick trade off.
02:24
Here are three choices you have product A, which is low cost available in two months. It is a great performer, and it's medium risk.
02:31
Um, product. Be also low cost, but it's available in 30 days. Uh, best performance, and it's a medium risk. Then you got products. See, it's a high cost. You can get it now. It is the best performance, and it's low cost. So this is a tough one.
02:52
How would you choose here? What do you choose here? Well,
02:54
this all comes back to those considerations that we have, right? If you have the money and you need the product right now, you're probably going to choose products. See
03:07
If you don't have the money,
03:09
Uh, and you can wait for one or two months, you're probably going to defer to product A or B and and that's kind of the basics of how we do a trade off. We have to look at the considerations on. We have to look at the impact to the organization and make the best choice possible.
03:29
So in this lesson we talked about the two parts of trade offs, which is alternatives and solutions we talked about. Those considerations specifically cost schedule, scope and risk. And then we did a quick example of a trade off.
03:42
We'll see you next time in our module summary.
Up Next
Information Systems Security Engineering Professional (ISSEP)

This ISSEP course provides students with the foundational knowledge of the concentration area of the CISSP certification that includes a focus on the processes used to develop secure systems. Students will learn key concepts and skills of the five ISSEP domains.

Instructed By