You are the project manager of GHT project. Your hardware vendor left you a voicemail saying that the delivery of the equipment you have ordered would not arrive on time. She wanted to give you a heads-up and asked that you return the call. Which of the following statements is TRUE?

• A.This is a residual risk.
• B.This is a trigger.
• C.This is a contingency plan.
• D.This is a secondary risk.
• E.Explanation:
  Triggers are warning signs of an upcoming risk event. Here delay in delivery signifies that there
  may be a risk event like delay in completion of project. Hence it is referred to as a trigger.
• F.is incorrect. A contingency plan is a plan devised for a specific situation when things go
  wrong. Contingency plans are often devised by governments or businesses who want to be
  prepared for anything that could happen.
  Here there are no such plans.
• G.is incorrect. Residual risk is the risk that remains after applying controls. But here in this
  scenario, risk event has not occurred yet.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective way to integrate risk and compliance management?

• A.Conducting regular self-assessments to verify compliance
• B.Embedding risk management into compliance decision-making
• C.Designing corrective actions to improve risk response capabilities
• D.Embedding risk management into processes that are aligned with business drivers

Comment: *

Name: *

Email: *

Verification: *

An organization maintains independent departmental risk registers that are not automatically aggregated.
Which of the following is the GREATEST concern?

• A.Management may be unable to accurately evaluate the risk profile
• B.The same risk factor may be identified in multiple areas
• C.Multiple risk treatment efforts may be initiated to treat a given risk
• D.Resources may be inefficiency allocated

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to help ensure risk will be managed properly after a business process has been re-engineered?

• A.Reporting key performance indicators (KPIs) for core processes
• B.Conducting a post-implementation review to determine lessons learned
• C.Establishing escalation procedures for anomaly events
• D.Reassessing control effectiveness of the process

Comment: *

Name: *

Email: *

Verification: *

During the initial risk identification process for a business application, it is MOST important to include which of the following stakeholders?

• A.Application architecture team
• B.Internal audit
• C.Business process owners
• D.Business process consumers

Comment: *

Name: *

Email: *

Verification: *