Monte Carlo analysis/simulation

A technique that models risk and uncertainty by running many computer-simulated iterations, producing a probability distribution of possible outcomes for a decision or plan.

Key Points

  • Uses random sampling of input ranges (e.g., duration, cost) across thousands of iterations.
  • Produces probability distributions and percentiles (e.g., P10, P50, P90) for outcomes.
  • Supports setting realistic buffers and reserves for schedule and cost.
  • Quality depends on accurate input distributions and appropriate correlations between variables.

Example

A project team defines three-point estimates for key activities and assigns distributions to commodity prices. Running a Monte Carlo schedule and cost simulation shows a 60% chance of finishing by June 30 within the approved budget; to reach 80% confidence, the model indicates adding two weeks of buffer and a 7% cost contingency.

PMP Example Question

A project manager wants to estimate the probability of completing the project within budget and by a target date, given uncertain productivity and fluctuating material prices. Which tool should be used?

  1. Sensitivity analysis
  2. Monte Carlo simulation
  3. Expert judgment
  4. Parametric estimating

Correct Answer: B — Monte Carlo simulation

Explanation: Monte Carlo runs many iterations with variable inputs to generate a probability distribution for schedule and cost outcomes, enabling confidence-based forecasts.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Run the drill before the incident runs you

Design, run and prove OT drills and tabletop exercises before an incident tests your team. OT Incident Drills and Exercises includes 24 lessons and practical exercise materials, delivered through HKSM Courses for US$47 one-time. 30-day money-back guarantee when 50% or less of the course has been consumed.

Explore the Course