Section: Planning

The first step the project manager should take to gather customer requirements for an information security project is to conduct a stakeholder analysis. A stakeholder analysis is a technique that helps identify the key stakeholders, their needs, expectations, interests, and influence on the project. By conducting a stakeholder analysis, the project manager can understand how regional policies may affect the customer requirements, such as legal, regulatory, cultural, or ethical factors. A stakeholder analysis can also help the project manager prioritize the requirements and plan the communication and engagement strategies with the stakeholders. References: = PMBOKGuide, Sixth Edition, pages 513-515; A 6-step guide to requirements gathering for project success, Step 1: Assign roles.

According to the PMBOK Guide, requirements elicitation is the process of identifying and communicating with stakeholders to determine what their needs and expectations are for the project. Requirements elicitation helps to ensure that the project delivers value to the stakeholders and meets their requirements. In this scenario, the project manager should have applied requirements elicitation techniques, such as interviews, workshops, surveys, or observation, to involve the stakeholders consistently in the requirements process and to clarify and validate their needs and expectations. This would have helped to avoid the situation of conflicting and changing information from the stakeholders and to gain their buy-in and support for the project. References: PMBOK Guide, 6th edition, page 140-141. PMP Sample Test Questions, question 4. Free PMP Questions and Answers, question 4. Free PMP Practice Exam Questions, question 4.