TechKnowSurge
CompTIA Security+ 4.2 NIST 800-53 SA-4 NIST NICE K0910
InteractiveSecurityFree

Name the Procurement Step

Asking each site what reports it needs, listing candidate products, testing the shortlist, getting sign-off, issuing the order: which step is it?

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

The Acquisition and Procurement lesson gives a process in five steps. Needs assessment: work out what the business actually needs before looking at any product. Users may not know the right questions to ask, and a product that suits one department may not suit the company as a whole. The lesson calls this the most overlooked step: the daycare database failed because nobody did it. Product research: find the products that could meet those needs. This builds the list of candidates, instead of choosing whatever a salesperson showed you. Product and vendor evaluation and selection: look closely at the candidates. Test them against the requirements, check the vendor (its security, support and references), and choose the best solution. Approval: someone with authority signs off. Who that is depends on the price and their position in the company. Purchase: the order is placed and paid for. A quick test for each card: is it about what we need, which products might fit, which one is best, who allows the spend, or buying it?

What you'll learn

Aligned to

CompTIA Security+
4.2 Explain the security implications of proper hardware, software, and data asset management.
NIST 800-53
SA-4 Acquisition Process
NIST NICE
K0910 Knowledge of needs assessment principles and practices

Key terms

Procurement
The process of acquiring goods and services for an organization, ensuring purchases align with company policy, standards, and IT requirements.
Needs Assessment
The process of identifying and defining a business requirement before evaluating or selecting a vendor or solution.
Vendor Evaluation
The process of objectively assessing potential product suppliers against defined requirements to select the best solution for an organization's needs.
Vendor Selection
The process of choosing one or more vendors to proceed with based on assessment results and business requirements.

Topics

Asset Management Procurement Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →