Acquisition

Securing the people, equipment, and other tangible resources needed to carry out project work. Obtaining these resources involves a cost to gain access, which may be monetary or take non-cash forms such as internal chargebacks, opportunity cost, or time commitments.

Key Points

  • Includes both human resources (staff, contractors) and physical resources (tools, facilities, materials).
  • Resources can come from internal departments or external suppliers, often requiring procurement or staffing actions.
  • Costs are not limited to payments; they can include internal allocations, opportunity costs, or schedule impacts.
  • Planned through resource and procurement processes; lead times and availability influence schedule and risk.

Example

On a construction project, the project manager rents a crane for two weeks and contracts a certified operator. The rental is a cash expense, while reassigning an in-house rigger from operations represents a non-cash opportunity cost due to reduced operational capacity.

PMP Example Question

Which activity best illustrates acquisition in a project context?

  1. Negotiating with a staffing vendor to bring in two developers for three months.
  2. Re-sequencing tasks to smooth out over-allocated resources.
  3. Updating the risk register after discovering a skills gap.
  4. Calculating cost performance index during monthly reporting.

Correct Answer: A — Securing needed people from an external source

Explanation: Acquisition is about obtaining human and material resources to do the work. Negotiating with a vendor to obtain developers is acquisition; the other options relate to resource optimization, risk management, or performance measurement.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Become an AI-First Agile Leader!

HK School of Management helps you apply AI to Agile work with practical, prompt-based workflows for real-world Scrum challenges. Practical skills, tools, and guidance you can apply right away. Covered by Udemy's 30-day refund policy.

Learn More