Inquiry Question 1: How are large-scale software solutions developed and managed?
Compare software development methodologies, including waterfall, agile and scrum, and identify when each is appropriate
A focused answer to the HSC Software Engineering Module 4 dot point on development methodologies. Waterfall, agile, scrum, kanban, when each is appropriate, the worked example, and the traps markers look for.
Reviewed by: AI editorial process; not yet individually human-reviewed
Have a quick question? Jump to the Q&A page
What this dot point is asking
NESA wants you to compare the dominant software development methodologies, name their phases or ceremonies, and identify the project contexts in which each is appropriate. Waterfall and agile (with scrum as the most common agile variant) are the two you must know in depth.
The answer
Waterfall
A sequential methodology. The project flows downstream through fixed phases:
- Requirements: capture every functional and non-functional requirement.
- Design: produce architecture, data model and detailed design documents.
- Implementation: write the code.
- Verification (testing): confirm the implementation meets the requirements.
- Deployment: ship to production.
- Maintenance: bug fixes and changes go through formal change control.
Phase exit gates require sign-off documents. Changes to earlier phases require formal change requests.
Strengths: predictable plan, clear deliverables, suits regulated and contracting environments where every requirement must be traceable.
Weaknesses: assumes requirements are known up front, late discovery of defects is expensive, no working software until late in the project, struggles when requirements change.
When to use: building regulations, defence procurement, certified medical devices, anything with a fully specified contract.
Agile
An iterative, incremental methodology. The project is broken into short iterations (1-4 weeks). Each iteration delivers a working slice of software.
The Agile Manifesto (2001) values:
- Individuals and interactions over processes and tools
- Working software over comprehensive documentation
- Customer collaboration over contract negotiation
- Responding to change over following a plan
Agile is a family of methodologies. The most common variants:
- Scrum: fixed-length sprints, defined roles (product owner, scrum master, dev team), ceremonies (planning, daily stand-up, review, retrospective).
- Kanban: continuous flow, visual board, work-in-progress limits, no fixed sprint.
- Extreme Programming (XP): heavy emphasis on engineering practices (pair programming, TDD, continuous integration).
Scrum in detail
The most widely used agile variant:
Roles
- Product Owner: decides what to build, prioritises the backlog.
- Scrum Master: facilitates the process, removes blockers.
- Development Team: builds the increment.
Artefacts
- Product backlog: prioritised list of all work, owned by the product owner.
- Sprint backlog: items selected for the current sprint.
- Increment: the working software produced this sprint.
Ceremonies (per sprint, typically 2 weeks)
- Sprint planning at the start: the team commits to a sprint goal and selects backlog items.
- Daily stand-up (15 minutes): each member shares what they did, what they will do, and any blockers.
- Sprint review at the end: demo the increment to stakeholders.
- Sprint retrospective: the team reflects on what to improve.
Kanban in detail
Continuous flow, no fixed sprint. The team maintains a visual board with columns (To do, In progress, In review, Done) and a work-in-progress (WIP) limit per column. Items flow through the board as capacity allows.
Strengths: minimal ceremony, easy to start, great for support and operations work where priorities change daily.
Weaknesses: no built-in checkpoint for stakeholders, less predictable timelines.
When to choose what
| Project shape | Methodology |
|---|---|
| Fully specified contract, regulated industry, stable requirements | Waterfall |
| Customer-facing product, fast-changing market, early user feedback valuable | Scrum |
| Support team, operations work, continuous flow of small items | Kanban |
| Strong engineering culture, willing team, tight feedback loop | XP (often inside scrum) |
Most real teams pick a base methodology and adapt. A scrum team may also use kanban for support tickets. A waterfall project may use agile sprints inside the implementation phase.
Hybrid approaches
- Scrumban: scrum's roles and ceremonies with kanban's WIP limits.
- SAFe (Scaled Agile Framework): scrum coordinated across many teams in a large enterprise.
- Hybrid waterfall-agile: high-level waterfall plan for the year, agile sprints inside each milestone.
A worked example
A two-person team building a study app. They choose scrum:
- 2-week sprints.
- A shared GitHub issue board as the backlog.
- Daily 10-minute video stand-up.
- End-of-sprint demo to their teacher (the product owner stand-in).
- Retrospective notes in a shared doc.
After three sprints they have a working app with login, study sessions, and progress tracking. Each sprint delivered something usable, even if the full feature set is not yet complete. They can re-prioritise the backlog if user feedback suggests a different next feature.
Exam-style practice questions
Practice questions written in the style of NESA exam questions on this dot point, with worked answer explainers. The year tag is the paper they imitate, not the source.
2024 HSC6 marksCompare the waterfall and agile software development methodologies. For each, identify a project type where it would be appropriate and one where it would not.Show worked answer →
Waterfall is a sequential methodology. The project moves through fixed phases in order: requirements, design, implementation, testing, deployment, maintenance. Each phase produces documents that feed the next. You do not revisit earlier phases without a formal change request.
Appropriate: a defence contract with fixed requirements, a building regulation system where the rules are legally locked, embedded firmware for a medical device where every requirement must be traceable.
Not appropriate: a new consumer web app where user feedback will reshape priorities, a startup MVP where the product is still being discovered, any environment where requirements change faster than the project plan can be updated.
Agile is iterative. The project is broken into short iterations (typically 1-4 weeks). Each iteration produces a working slice of software. Requirements are revisited continuously. The team reflects after each iteration and adjusts.
Appropriate: a customer-facing app whose users will be invited to use early versions and give feedback, a digital product whose competitive landscape changes monthly, a team that needs to deliver value within months not years.
Not appropriate: contracts that require a fully specified deliverable up front, regulated environments that demand documented sign-off at each phase, safety-critical systems where each change requires formal verification.
Markers reward both methodologies named correctly, their core mechanic (sequential vs iterative), concrete suitability examples, and the recognition that methodology choice depends on requirements stability, regulatory context, and team size.
Practice questions
Original practice questions graded from foundation to exam level, each with a full worked solution. Try them before revealing the solution.
foundation3 marksA government agency is procuring software for a fixed-scope tender. All requirements are defined in a signed contract, and an independent auditor must sign off on each phase before the next can begin. Identify the most appropriate methodology and justify your choice.Show worked solution →
Methodology: waterfall.
Justification: the requirements are fully known and locked into a signed contract, so there is little benefit to iterating on them. The mandatory phase sign-off by an independent auditor matches waterfall's sequential phase-gate structure, where each phase (requirements, design, implementation, verification) produces a document that is formally reviewed before the next phase starts.
Marking criteria: 1 mark for naming waterfall, 1 mark for linking the fixed contract/locked requirements to waterfall's sequential nature, 1 mark for linking the audit sign-off requirement to waterfall's phase-gate structure.
foundation3 marksState the four ceremonies used in scrum and, for ONE of them, explain what it is intended to achieve.Show worked solution →
The four ceremonies: sprint planning, daily stand-up, sprint review, sprint retrospective.
Explanation (any one, e.g. sprint retrospective): held at the end of the sprint, the whole team reflects on what went well, what did not, and agrees one or two concrete changes to try in the next sprint. Its purpose is continuous process improvement, not reviewing the product itself (that is the sprint review's job).
Marking criteria: 1 mark for all four ceremonies named correctly, 2 marks for a correct explanation of the purpose of the chosen ceremony (not just its name or timing).
core4 marksThe table below shows story points completed by a scrum team over four two-week sprints. Sprint 1: 18, Sprint 2: 22, Sprint 3: 15, Sprint 4: 24. (a) Calculate the team's average velocity across the four sprints. (b) Using this figure, estimate how many further sprints are needed to complete a remaining backlog of 152 story points.Show worked solution →
(a) Average velocity.
(b) Sprints needed.
Marking criteria: 1 mark for correctly summing the four sprints (79), 1 mark for the correct average (19.75), 1 mark for correctly dividing the remaining backlog by the average, 1 mark for rounding UP to a whole number of sprints with a reason given.
core4 marksCompare kanban and scrum for a small internal IT helpdesk team that receives an unpredictable stream of support tickets each day, with no fixed release cycle.Show worked solution →
Kanban suits this team better. Support tickets arrive continuously and unpredictably, which does not fit neatly into a fixed 2-week sprint commitment; a ticket that is urgent on Tuesday cannot wait for the next sprint planning session. Kanban's continuous flow with a visual board and work-in-progress limits lets the team pull the next highest-priority ticket as soon as capacity is free, and WIP limits stop the queue of "in progress" tickets from growing unmanageably.
Scrum would force the team to estimate and commit to a fixed sprint backlog of tickets, but new high-priority tickets arriving mid-sprint would break that commitment repeatedly, undermining the sprint's purpose.
Marking criteria: 1 mark for correctly identifying kanban as the better fit, 1 mark for explaining continuous/unpredictable flow versus fixed sprint commitment, 1 mark for referencing WIP limits or the visual board specifically, 1 mark for explaining why scrum's sprint commitment breaks down in this context.
core5 marksA mid-size company is migrating from waterfall to a hybrid waterfall-agile approach for a new payroll system that must comply with Fair Work Act reporting rules. Describe how a hybrid approach could satisfy both the compliance requirement and the desire for faster feedback.Show worked solution →
A hybrid keeps a high-level waterfall plan for the parts that are non-negotiable: the legally required payroll reporting fields and calculations are captured as a locked set of requirements up front, with formal sign-off and traceability from requirement to test, just as a compliance auditor would expect from pure waterfall.
Inside that outer plan, the implementation is broken into agile sprints. Each sprint delivers a working slice, for example the leave-accrual calculation in sprint 1 and the payslip generation in sprint 2, which stakeholders can review and give feedback on early, rather than waiting until the whole system is built to discover a usability problem.
This satisfies compliance (the legally mandated calculations are fixed, documented and tested before release) while still getting the faster feedback and reduced late-stage risk that comes from agile's iterative delivery of working software.
Marking criteria: 1 mark for describing the outer waterfall layer holding the locked/compliance requirements, 1 mark for describing the inner agile sprints delivering working slices, 1 mark for a concrete payroll example, 1 mark for explaining how compliance is satisfied, 1 mark for explaining how feedback speed improves.
exam6 marksAssess the suitability of scrum for a team developing software for an implantable pacemaker, where the Therapeutic Goods Administration (TGA) requires full traceability of every requirement to a verified test before release.Show worked solution →
This is a 6-mark ASSESS: markers reward a supported judgement, not a description of scrum alone.
Plan. Thesis: scrum, used unmodified, is poorly suited to this context, because its core strength (revisiting requirements mid-stream) directly conflicts with the TGA's demand for fixed, fully traceable requirements; a heavily gated waterfall (or a waterfall outer layer with agile only inside implementation) is more appropriate.
Model paragraph. Scrum's central value is the ability to change direction between sprints as the team and stakeholders learn more, which is exactly the property a life-critical, regulator-audited device cannot tolerate: every requirement must trace to a verified test BEFORE release, so requirements cannot be discovered or revised late in development without re-triggering the full verification chain. Scrum's short sprints and lightweight documentation also work against the TGA's expectation of a complete, signed-off design history. Waterfall's sequential phases, each producing a reviewable document with a formal gate, match the traceability requirement directly: requirements are captured once, verified through design and implementation, and independently tested before deployment. However, a purely rigid waterfall risks late discovery of implementation problems, so many regulated device teams in practice use a hybrid: the requirements and verification plan are locked in a waterfall-style gated process to satisfy the TGA, while internal engineering tasks (e.g. writing and unit-testing individual modules) may still use short internal iterations, provided every change still routes back through the same formal verification gate before it counts as "done". On balance, scrum in its standard form is not suitable for the pacemaker's release process itself, though agile-style internal engineering discipline can still improve code quality within a waterfall-governed outer structure.
Marker's note: top-band answers (1) explicitly weigh scrum's strength (adaptability) against why it is a liability here, (2) connect the TGA traceability requirement to a specific waterfall feature (phase gates, signed documents), (3) acknowledge a nuanced hybrid rather than a blanket "scrum is bad", and (4) end with an explicit judgement.
exam7 marksA university group of four students has eight weeks to build a prototype app. The marking criteria reward evidence of iterative development and stakeholder feedback via a mid-project demo. Justify a methodology and ceremony plan for this team, addressing risks specific to student teams (availability clashes, uneven skill levels).Show worked solution →
Methodology: scrum, run over four 2-week sprints, aligning naturally with the mid-project demo falling at the end of sprint 2.
Ceremony plan.
- Sprint planning (30 minutes, start of each sprint): the team agrees a sprint goal and selects backlog items, sized to the least available member's realistic hours rather than the most available, to avoid over-commitment.
- Daily stand-up (10 minutes, async text update if a live call clashes with timetables): each member states progress, next step, and blockers, so uneven skill levels surface early rather than at the deadline.
- Sprint review (end of each sprint): a short demo to the tutor (acting as product owner), producing the exact "stakeholder feedback" evidence the rubric rewards.
- Sprint retrospective: the team names one process problem (e.g. one member is consistently blocked waiting on another's module) and agrees a concrete fix, such as pairing the stronger and weaker coder on the next sprint's hardest ticket.
Addressing student-specific risks. Availability clashes are managed by keeping stand-ups asynchronous and sprints short enough (2 weeks) that a single missed week does not derail the whole project. Uneven skill levels are managed by having the product owner (tutor) and scrum master (a rotating team member) split backlog items by both priority and estimated difficulty, deliberately assigning a mix of easier and harder tickets to each person each sprint, and using the retrospective to reassign or pair on tickets that stalled.
Why not waterfall. With only eight weeks, a waterfall requirements-then-design-then-build sequence would leave no time to recover from a wrong assumption discovered late; scrum's early working slices and the mandated mid-project demo give the team (and the marker) visible evidence of progress and adaptation well before the deadline.
Marking criteria: 1 mark for justifying scrum over waterfall for this timeframe, 1 mark for a coherent sprint length/count that fits 8 weeks, 2 marks for a ceremony plan that names purpose not just labels, 2 marks for concrete strategies addressing availability clashes AND uneven skill levels, 1 mark for explicitly linking sprint review to the mid-project demo requirement.
