Until when should a business case supporting risk mitigation efforts be retained?

Until when should a business case supporting risk mitigation efforts be retained?

• A. The project is approved.
• B. User acceptance of the application.
• C. The application is deployed.
• D. The application's end of life.

Answer: (D)

A business case supporting risk mitigation efforts should be retained until the application's end of life because it serves as a record of the rationale, decisions, and resource allocations made during the risk management process. This documentation is valuable not only for accountability but also for informing future projects and risk management activities. Retaining the business case until the end of the application's life ensures that the organization has access to critical information for a comprehensive evaluation of the risk mitigation strategies employed, including their effectiveness and any lessons learned. Additionally, it may be necessary to refer to the business case during audits, compliance checks, or in the event of any incidents related to the application after its deployment. Thus, a complete record throughout the lifespan of the application supports ongoing risk management practices and enhances organizational learning and accountability.

A business case supporting risk mitigation efforts should be retained until the application's end of life because it serves as a record of the rationale, decisions, and resource allocations made during the risk management process. This documentation is valuable not only for accountability but also for informing future projects and risk management activities.

Retaining the business case until the end of the application's life ensures that the organization has access to critical information for a comprehensive evaluation of the risk mitigation strategies employed, including their effectiveness and any lessons learned. Additionally, it may be necessary to refer to the business case during audits, compliance checks, or in the event of any incidents related to the application after its deployment. Thus, a complete record throughout the lifespan of the application supports ongoing risk management practices and enhances organizational learning and accountability.