OG0-092 Exam - Question 5

Question

Scenario: Vittronics Ltd.

Vittronics Ltd. is a leading medical device manufacturer in the highly competitive market for Migraine Headache Pain Management (MHPM) devices. These tiny wireless devices are implanted in the brain and can deliver a precise electric shock when the wearable Pain Control Unit (PCU) detects an increase in stress induced by the onset of a migraine headache.

This technology will be a breakthrough in the treatment of this condition, and several competitors are striving to be the first to introduce a product into the market.

However, all of them must demonstrate the effectiveness and safety of their products in a set of clinical trials that will satisfy the regulatory requirements of the countries in the target markets.

The Enterprise Architecture group at Vittronics has been engaged in an architecture development project to create a Secure Private Immersive Collaborative

Environment (SPICE) that will allow researchers at its product development laboratories worldwide to share information about their independent clinical trials.

The Vittronics Enterprise Architecture group is a mature organization that has been utilizing TOGAF for several years. They have recently upgraded to TOGAF 9.

The Vittronics Architecture Development Method (VADM) is strictly based on the TOGAF 9 Architecture Development Method (ADM) with extensions required to support current good manufacturing practices and good laboratory practices in their target markets.

The SPICE project team has now completed the Business, Information Systems, and Technology Architecture phases and has produced a complete set of deliverables for each phase. Due to the highly sensitive nature of the information that is managed in SPICE, special care was taken to ensure that each architecture domain included an examination of the security and privacy issues that are relevant for each domain. A corresponding SPICE Security Architecture has been defined.

The Executive Vice President for Clinical Research is the sponsor of the Enterprise Architecture activity.

You are serving as the Lead Architect for the SPICE project team.

As required by TOGAF, the SPICE project team res completed a Business Transformation Readiness Assessment in Phase A (Architecture Vision). In that assessment, it was determined that there are risks associated with the adoption of the Immersive Collaborative Environment. Despite a clear expression of the vision and the business need for utilizing SPICE to accelerate the clinical trials, the researchers have been resisting the change because of concerns about safeguarding individually identifiable information about the subjects who were participating in the trials.

You have been asked to recommend how this situation be managed in the implementation planning phases.

Based on TOGAF 9, which of the following is the best answer?

Examice · Accepted Answer

In TOGAF 9, Phase E involves reviewing the Business Transformation Readiness Assessment and addressing any identified risks. It is essential to identify, classify, and mitigate these risks as part of the readiness factors assessment. This aligns well with the necessity of ensuring that the solution is culturally and technically feasible before moving forward with implementing the proposed architecture. Phase E emphasizes adapting the high-level solutions strategy and developing Transition Architectures if the risks can be satisfactorily mitigated, thus ensuring a well-rounded approach to managing the adoption of SPICE amid privacy concerns.

karve · Answer

I think the answer is C. Reason being... Phase E has a step which says: "Review the findings of the Business Transformation Readiness Assessment previously conducted in Phase A and determine their impact on the Architecture Roadmap and the Implementation and Migration Strategy. It is important to identify, classify, and mitigate risks associated with the transformation effort. Risks should be documented in the Consolidated Gaps, Solutions, and Dependencies matrix." It says identify, classify and "MITIGATE" risk. The question also says that "The SPICE project team has now completed the Business, Information Systems, and Technology Architecture phases and has produced a complete set of deliverables for each phase. Due to the highly sensitive nature of the information that is managed in SPICE, special care was taken to ensure that each architecture domain included an examination of the security and privacy issues that are relevant for each domain.". So it means that the data privacy issues were examined. So as per details provided above answer should be C.

tomvik · Answer

Answer is C

RoryGates · Answer

Geez I think these exam questions are more a liability than a benefit...
C.

chandank · Answer

Agree C

venksfc · Answer

Yes. Answer is C

tzhputh1 · Answer

never ever answer B !!! but C!!!

sushmapatil · Answer

C is the answer.

[Removed] · Answer

Answer is C as 12.3.7 Confirm Readiness and Risk for Business Transformation is a step in Phase E and contains "It is important to identify, classify, and mitigate risks
associated with the transformation effort." as contained in C. Phases B-D have also addressed security and privacy.
Not B due to the question asking for the solution in the implementation phases (E/F, not A), and we do not discuss technical solutions in phase A. B makes no sense.

faizy3 · Answer

C makes more sense.

sameersoftyhcl · Answer

I think the answer is C because the question clearly asks to recommend how this situation be managed in the "implementation planning phases", so we have only E and F phases to deal with implementation planning.  And answer C clearly shows what phase E doesto deal with risk. Answer B probably be wrong as patial or full ADM cycle is decided on Phase G (implementation Governance) based on residual risk.

KMurthy04 · Answer

It is B beause the question is based in ADM iterations (part 3) and not on Part 2 - ADM phases.
Org's attitude to risk (18.6) for clinical trials, forces it to go back to Phase A and make corrections.

ADR_SA_21 · Answer

Do we brainstorm technical solution in phase A? If not, B cannot be right choice. C is the one I would choose.

Coitsu · Answer

Answer is C... it makes more sense

shilpa1701 · Answer

how to crosss verify correct answers as I feel C is correct but here B is given..

SVGNR · Answer

Option A is incorrect because - " According to TOGAF -  that Phase E must resolve all conflicts in a meaningful way before proceeding further  & TOGAF doesn't talk about consensus anywhere in it's specification)
Option C is incorrect because -  Business Transformation Readiness Assessment is done in Phase-A -Architecture Vision & Risks can be reviewed in every phase of ADM including Phase E and not only in Phase “E”. However, this answer is not as TOGAF centric as you would expect the best answer to be. Also it also does not address/specify what should happen if risks can’t be mitigated in a satisfactory way)
Option - D is incorrect because -  Nothing TOGAF specific in this answer
Hence Option - B is the best answer . Here is the additional notes on why Option B is the best possible answer
Option B Reinforces the concept of iterating between the phases of TOGAF & Addresses the problem related to the RISK in TOGAF centric language and touches aspects related to RISK management as per TOGAF

Flesky · Answer

I think that the key sentence for answer B is: "the researchers have been resisting the change because of concerns about safeguarding individually identifiable information about the subjects who were participating in the trials." ... so you have a residual risk.

Arvind_Kumar_Avinash · Answer

I chose B which matches the given answer. The reason why C is not the correct answer is that it states, 'If the risks can be satisfactorily mitigated...' but it does not talk about otherwise case i.e. what if the risks can not be satisfactorily mitigated. The approach mentioned in Option B is what exactly is required to be taken in this scenario.

rkustagi · Answer

ANswer C seems more closer to the TOGAF approach

Soumitra29 · Answer

Answer is C : 12.3.7 Confirm Readiness and Risk for Business Transformation

Review the findings of the Business Transformation Readiness Assessment previously conducted in Phase A and determine their impact on the Architecture Roadmap and the Implementation and Migration Strategy. It is important to identify, classify, and mitigate risks associated with the transformation effort. Risks should be documented in the Consolidated Gaps, Solutions, and Dependencies matrix.

ashu77 · Answer

The Question specifically asks for "You have been asked to recommend how this situation be managed in the implementation planning phases" so there is no question of going back to phase A again. The Option B assume that the Architceture has not taken care of the security concerns but that is a wrong assumption. The Question description clearly says "special care was taken to ensure that each architecture domain included an examination of the security and privacy issues that are relevant for each domain". 
So overall the story is that although the Security Controls Building Blocks are present in the Architceture but Stakeholders still have doubts. Hence the Correct option is C.

[Removed] · Answer

Answer is C as 12.3.7 Confirm Readiness and Risk for Business Transformation is a step in Phase E and contains "It is important to identify, classify, and mitigate risks
associated with the transformation effort." as contained in C. Phases B-D have also addressed security and privacy.
Not B due to the question asking for the solution in the implementation phases (E/F, not A), and we do not discuss technical solutions in phase A. B makes no sense.

RACHIT0412 · Answer

CHatGPT says C

red_panda · Answer

C is the correct answer

lxfmm · Answer

Also vote for C.

sim3 · Answer

It should be C

OG0-092 Exam - Question 5

Discussion