Question

You are asked to do a risk assessment of cyberattacks for the next quarter. Your boss wants to know how long it will take you. You are hopeful that it

will only take 4 days, but you know that if there is a problem area it could take up to 15 days. Your last assessment took 8 days. Using PERT, how many days should you tell your boss to give you so that you feel comfortable you'll have enough time? **(round any remainder to the next whole
number; i.e. 1.2 would round to 2)

Formula
(Min+(4x most likely) + Max) /6

Answer 1

Using the PERT formula, it is calculated that 9 days are needed to comfortably complete the risk assessment of cyberattacks, after rounding up the result to the nearest whole number.

Step-by-step explanation:

To estimate the time needed to complete a risk assessment using the PERT (Program Evaluation and Review Technique), you apply the given formula: (Min + (4 x most likely) + Max) / 6. In this scenario, the optimistic time (Min) is 4 days, the most likely time is 8 days, and the pessimistic time (Max) is 15 days. Substituting these values into the formula gives us:

(4 + (4 x 8) + 15) / 6 = (4 + 32 + 15) / 6 = 51 / 6 = 8.5 days.

Since we round any remainder to the next whole number, we round 8.5 days up to 9 days. Therefore, you should tell your boss to give you at least 9 days to feel comfortable that you'll have enough time to complete the risk assessment.