Scope Creep

Unmanaged additions or growth of the product or project scope that occur without revising the schedule, budget, or resource commitments.

Key Points

  • Often triggered by informal requests, unclear requirements, or stakeholder pressure.
  • Happens when changes bypass impact analysis and formal change control.
  • Leads to schedule delays, budget overruns, and potential quality issues.
  • Prevented by a clear scope baseline, rigorous change control, and proactive stakeholder communication.

Example

Midway through a 6-month CRM implementation, the sales VP asks to add lead-scoring and custom dashboards. The project manager accepts the work without a formal change request or adjusting the budget, timeline, or staffing. The team works overtime, milestones slip, and costs rise. This is scope creep.

PMP Example Question

A stakeholder asks to add several new reports late in execution and insists there will be no change to cost, schedule, or resources. What does this situation most likely illustrate?

  1. Scope validation
  2. Gold plating
  3. Scope creep
  4. Earned value variance

Correct Answer: C - Scope creep

Explanation: It is uncontrolled expansion of scope without corresponding adjustments to time, cost, or resources.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Launch your career!

HK School of Management and Technology offers training in project management, job-search strategies, and career growth. Practical skills, tools, and guidance you can apply right away. Covered by Udemy's 30-day refund policy.

Learn More