Decision Tree Analysis

A visual and quantitative approach for mapping a series of decisions and chance events, assigning probabilities, and calculating expected results to compare options when outcomes are uncertain.

Key Points

  • Represents decision nodes (squares) and chance nodes (circles) with branches showing possible paths.
  • Uses probabilities and outcomes to compute expected value (e.g., EMV) for each alternative.
  • Supports selecting among options when results are uncertain, such as choosing risk responses or vendors.
  • Assumes mutually exclusive paths and can include costs, benefits, and utility to reflect stakeholder preferences.

Example

A PM must choose how to deliver a module. Build in-house costs $300k with a 40% chance of a $120k delay penalty (EMV = 300k + 0.4 x 120k = $348k). Buy a COTS license for $260k and integrate: Vendor A (60%) integration cost $90k, Vendor B (40%) integration cost $200k, so expected integration = 0.6 x 90k + 0.4 x 200k = $134k; total expected cost = $260k + $134k = $394k. The decision tree favors building in-house ($348k) over buying ($394k).

PMP Example Question

A project manager needs to compare several mutually exclusive risk responses that involve sequential decisions and uncertain outcomes. She wants to assign probabilities and calculate expected monetary value to justify her choice. Which tool should she use?

  1. Monte Carlo simulation
  2. Decision tree analysis
  3. Pareto chart
  4. Sensitivity analysis

Correct Answer: B — Decision tree analysis

Explanation: Decision tree analysis maps decision and chance nodes and computes expected values for each path. Monte Carlo simulates many scenarios but does not depict branching choices; Pareto charts rank causes; sensitivity analysis shows which variables drive results.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Stop Managing Admin. Start Leading the Future!

HK School of Management helps you master AI-Prompt Engineering to automate chaos and drive strategic value. Move beyond status reports and risk logs by turning AI into your most capable assistant. Learn the core elements of prompt engineering to save hours every week and focus on high-value leadership. For the price of lunch, you get practical frameworks to future-proof your career and solve the blank page problem immediately. Backed by a 30-day money-back guarantee-zero risk, real impact.

Enroll Now