You have been assigned as the Project Manager for a new project that involves development of a new interface for your existing time management system. You have completed identifying all possible risks along with the stakeholders and team and have calculated the probability and impact of these risks. Which of the following would you need next to help you prioritize the risks?

• A.Affinity Diagram
• B.Risk rating rules
• C.Project Network Diagram
• D.Risk categories
• E.Explanation:
  Risk rating rules define how to prioritize risks after the related probability and impact values are calculated. These are generally included in the organizational process assets and are refined for individual projects.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is NOT true regarding the risk management plan?

• A.The risk management plan is an output of the Plan Risk Management process.
• B.The risk management plan is an input to all the remaining risk-planning processes.
• C.The risk management plan includes a description of the risk responses and triggers.
• D.The risk management plan includes thresholds, scoring and interpretation methods, responsible parties, and budgets.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST measures the operational effectiveness of risk management capabilities?

• A.Capability maturity models (CMMs)
• B.Metric thresholds
• C.Key risk indicators (KRIs)
• D.Key performance indicators (KPIs)
• E.Explanation:
  Key performance indicators (KPIs) provide insights into the operational effectiveness of the concept or capability that they monitor. Key Performance Indicators is a set of measures that a company or industry uses to measure and/or compare performance in terms of meeting their strategic and operational goals. KPIs vary with company to company, depending on their priorities or performance criteria. A company must establish its strategic and operational goals and then choose their KPIs which can best reflect those goals. For example, if a software company's goal is to have the fastest growth in its industry, its main performance indicator may be the measure of its annualrevenue growth.

Comment: *

Name: *

Email: *

Verification: *

An organization control environment is MOST effective when:

• A.controls perform as intended.
• B.control designs are reviewed periodically
• C.controls are implemented consistently.
• D.controls operate efficiently

Comment: *

Name: *

Email: *

Verification: *

After a high-profile systems breach at an organization s key vendor, the vendor has implemented additional mitigating controls. The vendor has voluntarily shared the following set of assessments:
After a high-profile systems breach at an organization s key vendor, the vendor has implemented additional mitigating controls. The vendor has voluntarily shared the following set of assessments:
Which of the assessments provides the MOST reliable input to evaluate residual risk in the vendor's control environment?

• A.External audit
• B.Regulatory examination
• C.Internal audit
• D.Vendor performance scorecard

Comment: *

Name: *

Email: *

Verification: *