A project manager is leading an infrastructure upgrade project for a financial services company. During project planning, the compliance officer informs the project manager that new data protection regulations will take effect six months before the planned project completion date. These regulations will require specific security controls to be implemented in the new infrastructure. The project schedule shows that infrastructure deployment is planned to begin in four months. What should the project manager do to ensure regulatory compliance?

Question

Accepted Answer

The correct answer is A. The correct answer is to update the project requirements to include the new security controls and assess the impact on scope, schedule, and budget. In predictive project management, known regulatory requirements must be incorporated into the project baseline before implementation begins. Since the project manager has advance notice of the regulations and their effective date, integrating these requirements now prevents costly rework and ensures compliance when the system goes live. Option B (waiting) risks discovering the changes are significant after work has begun, leading to expensive rework or project delays. Option C creates compliance risk by deploying infrastructure that won't meet regulatory requirements when they take effect. Option D is inappropriate because regulatory compliance is typically non-negotiable, and the project should adapt to meet legal requirements rather than seeking exemptions.

More Business Environment Questions