Quality Assurance

An ongoing practice of reviewing and improving the processes, methods, and standards that guide quality management on a project, ensuring they remain suitable and effective. These activities are integrated into the day-to-day work.

Key Points

  • Focuses on the quality of processes and standards, not on inspecting finished deliverables (that is quality control).
  • Performed continuously during execution and embedded in regular team activities.
  • Common techniques include audits, process reviews, checklists, and retrospectives.
  • Leads to preventative improvements, such as updating procedures, standards, or the team's Definition of Done.

Example

Mid-sprint, a Scrum team reviews its testing and code review workflow. A process audit finds inconsistent peer reviews and flaky tests. The team updates the Definition of Done to require peer review, improves CI checks, and revises coding standards to prevent defects.

PMP Example Question

During an iteration, the team evaluates whether its test and code review process still aligns with organizational standards and updates the Definition of Done accordingly. What is this an example of?

  1. Quality assurance
  2. Quality control
  3. Validate Scope
  4. Plan Quality Management

Correct Answer: A — Quality assurance

Explanation: The scenario describes assessing and improving processes and standards during the work. Quality control inspects outputs, Validate Scope accepts deliverables, and Plan Quality Management establishes the approach before execution.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Build complete project plans in minutes with AI

Learn how to use AI to create charters, WBSs, schedules, risk registers, and executive reports while staying in control. This course gives you prompt templates and practical workflows based on real project work. Practical skills, tools, and guidance you can apply right away. Covered by Udemy's 30-day refund policy.

Learn More