Decision Tree Analysis

A visual and quantitative approach for mapping a series of decisions and chance events, assigning probabilities, and calculating expected results to compare options when outcomes are uncertain.

Key Points

  • Represents decision nodes (squares) and chance nodes (circles) with branches showing possible paths.
  • Uses probabilities and outcomes to compute expected value (e.g., EMV) for each alternative.
  • Supports selecting among options when results are uncertain, such as choosing risk responses or vendors.
  • Assumes mutually exclusive paths and can include costs, benefits, and utility to reflect stakeholder preferences.

Example

A PM must choose how to deliver a module. Build in-house costs $300k with a 40% chance of a $120k delay penalty (EMV = 300k + 0.4 x 120k = $348k). Buy a COTS license for $260k and integrate: Vendor A (60%) integration cost $90k, Vendor B (40%) integration cost $200k, so expected integration = 0.6 x 90k + 0.4 x 200k = $134k; total expected cost = $260k + $134k = $394k. The decision tree favors building in-house ($348k) over buying ($394k).

PMP Example Question

A project manager needs to compare several mutually exclusive risk responses that involve sequential decisions and uncertain outcomes. She wants to assign probabilities and calculate expected monetary value to justify her choice. Which tool should she use?

  1. Monte Carlo simulation
  2. Decision tree analysis
  3. Pareto chart
  4. Sensitivity analysis

Correct Answer: B — Decision tree analysis

Explanation: Decision tree analysis maps decision and chance nodes and computes expected values for each path. Monte Carlo simulates many scenarios but does not depict branching choices; Pareto charts rank causes; sensitivity analysis shows which variables drive results.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Build complete project plans in minutes with AI

Stop spending hours on documentation. Learn how to use AI to create charters, WBS, schedules, risk registers, and executive reports faster—while staying fully in control. This course gives you ready-to-use prompt templates and practical workflows based on real project work. No guesswork, no fluff—just tools you can apply immediately. Backed by Udemy’s 30-day money-back guarantee, so you can start risk-free.

Learn More