You are managing a hybrid project for a healthcare provider where clinical workflow features are developed iteratively, but privacy and security controls follow FDA-regulated waterfall processes. Your most experienced security architect, who is shared across multiple projects, will be unavailable for the next two months due to personal reasons. The upcoming sprints include patient data handling features that require security approval before release. The security architect has offered to review designs asynchronously during their absence, but cannot guarantee response times. Your compliance officer insists that all security reviews must be completed by a qualified architect before any patient data features go to production. What is your best course of action?

Question

Accepted Answer

The correct answer is A. Option A is correct because it builds organizational resilience by creating sustainable decision-making capacity through knowledge transfer while respecting boundaries and maintaining compliance (People Domain - Manage and Support Resources). This approach balances risk management with continuity by establishing clear guardrails and escalation paths. Option B is the main distractor as it appears safe but significantly delays critical features for two months, impacts business value delivery, and doesn't address the underlying single-point-of-failure risk in the resource model. Option C might work but an external consultant lacks organizational context and may not meet compliance requirements for authorization. Option D creates a two-month deployment backlog and delivery delay. Option E is inappropriate as it violates the person's boundaries during their leave and creates burnout risk.

More People Questions