Which of the following are the MOST important risk components that must be communicated among all the stakeholders?
Each correct answer represents a part of the solution. Choose three.

• A.Various risk response used in the project
• B.Expectations from risk management
• C.Current risk management capability
• D.Status of risk with regard to IT risk

Correct Answer: B,C,D

Explanation/Reference:
Explanation:
The broad array of information and the major types of IT risk information that should be communicated are as follows:
Expectations from risk management: They include risk strategy, policies, procedures, awareness

training, uninterrupted reinforcement of principles, etc. This essential communication drives all subsequent efforts on risk management and sets the overall expectations from risk management.
Current risk management capability: This allows monitoring of the status of the risk management

engine in the enterprise. It is a key indicator for effective risk management and has predictive value for how well the enterprise is managing risk and reducing exposure.
Status with regard to IT risk: This describes the actual status with regard to IT risk including information

of risk profile of the enterprise, Key risk indicators (KRIs) to support management reporting on risk, event-loss data, root cause of loss events and options to mitigate risk.
Incorrect Answers:
A: Risk response is only communicated to some of the stakeholders not all, as it is irrelevant for them. It is not communicated to the stakeholders of the project like project sponsors, etc.

Comment: *

Name: *

Email: *

Verification: *

IT stakeholders have asked a risk practitioner for IT risk profile reports associated with specific departments to allocate resources for risk mitigation. The BEST way to address this request would be to use:

• A.the cost associated with each control.
• B.information from the risk register.
• C.historical risk assessments.
• D.key risk indicators (KRls).

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of the GHY project for your company. This project has a budget of $543,000 and is expected to last 18 months. In this project, you have identified several risk events and created risk response plans. In what project management process group will you implement risk response plans?

• A.Monitoring and Controlling
• B.In any process group where the risk event resides
• C.Planning
• D.Executing
• E.Explanation:
  The monitor and control project risk process resides in the monitoring and controlling project
  management process group. This process is responsible for implementing risk response plans,
  tracking identified risks, monitoring residual risks, identifying new risks, and evaluating risk
  process effectiveness through the project.
• F.is incorrect. Risk response plans are not implemented as part of project planning.
• G.is incorrect. Risk response plans are not implemented as part of project execution.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important key performance indicator (KPI) to establish in the service level agreement (SLA) for an outsourced data center?

• A.Average response time to resolve system incidents
• B.Percentage of system availability
• C.Number of key systems hosted
• D.Percentage of systems included in recovery processes

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to include in a Software as a Service (SaaS) vendor agreement?

• A.An annual contract review
• B.A service level agreement (SLA)
• C.A requirement to adopt an established risk management framework
• D.A requirement to provide an independent audit report

Comment: *

Name: *

Email: *

Verification: *