Which of the following would be MOST helpful to a risk practitioner when ensuring that mitigated risk remains within acceptable limits?

• A.Designing a process for risk owners to periodically review identified risk
• B.Building an organizational risk profile after updating the risk register
• C.Ensuring risk owners participate in a periodic control testing process
• D.Implementing a process for ongoing monitoring of control effectiveness

Comment: *

Name: *

Email: *

Verification: *

A control for mitigating risk in a key business area cannot be implemented immediately. Which of the following is the risk practitioner's BEST course of action when a compensating control needs to be applied?

• A.Inform senior management.
• B.Obtain the risk owner's approval.
• C.update the risk response plan.
• D.Record the risk as accepted in the risk register.

Comment: *

Name: *

Email: *

Verification: *

Which of The following should be of GREATEST concern for an organization considering the adoption of a bring your own device (BYOD) initiative?

• A.Malicious users
• B.Data loss
• C.Device corruption
• D.User support

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of GHT project. A stakeholder of this project requested a change request in this project. What are your responsibilities as the project manager that you should do in order to approve this change request?
Each correct answer represents a complete solution. Choose two.

• A.Archive copies of all change requests in the project file.
• B.Evaluate the change request on behalf of the sponsor
• C.Judge the impact of each change request on project activities, schedule and budget.
• D.Formally accept the updated project plan

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are true for risk communication? Each correct answer represents a complete solution. Choose three.

• A.It requires a practical and deliberate scheduling approach to identify stakeholders, actions, and concerns.
• B.It helps in allocating the information concerning risk among the decision-makers.
• C.It requires investigation and interconnectivity of procedural, legal, social, political, and economic factors.
• D.It defines the issue of what a stakeholder does, not just what it says.

Correct Answer: A,C,D

Explanation/Reference:
Explanation:
Risk communication is the process of exchanging information and views about risks among stakeholders, such as groups, individuals, and institutions. Risk communication is mostly concerned with the nature of risk or expressing concerns, views, or reactions to risk managers or institutional bodies for risk management. The key plan to consider and communicate risk is to categorize and impose priorities, and acquire suitable measures to reduce risks. It is important throughout any crisis to put across multifaceted information in a simple and clear manner.
Risk communication helps in switching or allocating the information concerning risk among the decision- maker and the stakeholders.
Risk communication can be explained more clearly with the help of the following definitions:
It defines the issue of what a group does, not just what it says.

It must take into account the valuable element in user's perceptions of risk.

It will be more valuable if it is thought of as conversation, not instruction.

Risk communication is a fundamental and continuing element of the risk analysis exercise, and the involvement of the stakeholder group is from the beginning. It makes the stakeholders conscious of the process at each phase of the risk assessment. It helps to guarantee that the restrictions, outcomes, consequence, logic, and risk assessment are undoubtedly understood by all the stakeholders.
Incorrect Answers:
B: It helps in allocating the information concerning risk not only among the decision-makers but also stakeholders.

Comment: *

Name: *

Email: *

Verification: *