Task 1: Plan and manage project compliance

A pharmaceutical company project must comply with FDA regulations for clinical trial data management. During a routine audit preparation, the project manager discovers that a team member unknowingly used a non-compliant cloud storage method for storing patient data for the past three weeks. The data includes personally identifiable information and clinical trial results. What should the project manager do FIRST?

A project manager is working on a government contract that requires specific security clearances for team members. Two weeks into the project, one team member's security clearance is revoked due to personal issues unrelated to work performance. This team member was responsible for 25% of the critical path activities. What should the project manager do FIRST?

A project manager discovers that a team member has been sharing confidential project information with colleagues outside the project team. The information shared includes competitive intelligence and strategic plans that could harm the organization if disclosed further. The team member claims they didn't realize the information was confidential. What should the project manager do FIRST?

A project manager is leading a project that requires compliance with multiple regulatory frameworks. During a compliance audit, the auditor identifies several areas where the project documentation doesn't fully meet regulatory requirements, even though the actual work practices are compliant. The gaps are in documentation format and completeness rather than substance. What should the project manager do?

A project manager is working on a compliance project where the regulatory requirements are complex and subject to interpretation. The legal team and the technical team have different interpretations of a key requirement, which is affecting the project approach. Both interpretations seem reasonable, but they lead to significantly different implementation strategies. What should the project manager do?

A pharmaceutical project must comply with FDA regulations for clinical trial data management. During a routine audit preparation, the project manager discovers that a team member has been storing patient data in a non-compliant cloud storage system for the past month. What should the project manager do FIRST?

A project manager is working on a government contract that requires specific security clearances for all team members. During project execution, a key team member's security clearance is revoked due to personal issues. What should the project manager do FIRST?

A project manager is working on a government contract that requires specific documentation and approval processes. The project team, which is experienced with agile methods, is frustrated with what they perceive as bureaucratic overhead. What should the project manager do to address this tension?

A project manager discovers that a team member has been sharing confidential project information with colleagues outside the project team. The information sharing appears to be inadvertent rather than malicious, but it violates project confidentiality agreements. What should the project manager do FIRST?

A project manager is leading a healthcare technology implementation that must comply with HIPAA regulations, FDA medical device requirements, and state privacy laws. During planning, the team discovers that some of the proposed technical solutions may not fully comply with all regulatory requirements, and the compliance landscape is complex with overlapping jurisdictions. What should the project manager do FIRST?

A project manager is leading a healthcare technology implementation that must comply with HIPAA privacy regulations, FDA medical device requirements, state healthcare laws, and international data protection standards. During planning, the team discovers that some proposed technical solutions may conflict with certain regulatory requirements, and the compliance landscape involves overlapping and sometimes contradictory jurisdictions. What should the project manager do FIRST?

A pharmaceutical project must comply with FDA regulations. During a routine audit preparation, the project manager discovers that a team member unknowingly used a non-compliant data storage method for clinical trial information over the past month. The data integrity appears intact, but the storage method violates regulatory requirements. What should the project manager do FIRST?

A healthcare project must comply with HIPAA regulations for patient data protection. During a security audit, the project manager discovers that a third-party vendor's data handling practices may not fully comply with HIPAA requirements, even though they claim to be compliant. The vendor is critical to project success and replacing them would cause significant delays. What should the project manager do FIRST?

A financial services project must comply with multiple regulatory requirements including SOX, PCI-DSS, and industry-specific data protection standards. During a compliance review, the project manager discovers that some project activities may not fully meet the overlapping requirements of these different regulations. What should the project manager do FIRST?

A healthcare technology project must comply with HIPAA regulations for patient data protection. During a security audit, the project manager discovers that a vendor's data handling practices may not fully comply with HIPAA requirements, even though the vendor claims to be compliant. The vendor is critical to project success and replacing them would cause significant delays. What should the project manager do FIRST?

A pharmaceutical company project must comply with FDA regulations throughout development. The project manager discovers that a team member unknowingly used a non-compliant data storage method for clinical trial information. What should the project manager do FIRST?

A pharmaceutical company project must comply with FDA regulations throughout development. The project manager discovers that a team member unknowingly used a non-compliant data storage method for clinical trial information, potentially affecting data integrity. What should the project manager do FIRST?