nerdexam
(ISC)2

CAP · Question #106

There are seven risk responses for any project. Which one of the following is a valid risk response for a negative risk event?

The correct answer is C. Acceptance. Project risk responses are categorized by whether they address threats (negative risks) or opportunities (positive risks). Responses for negative risks (threats) are: Avoid, Transfer, Mitigate, and Accept. Responses for positive risks (opportunities) are: Exploit, Share…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

There are seven risk responses for any project. Which one of the following is a valid risk response for a negative risk event?

Options

  • AEnhance
  • BExploit
  • CAcceptance
  • DShare

How the community answered

(35 responses)
  • A
    3% (1)
  • C
    94% (33)
  • D
    3% (1)

Explanation

Project risk responses are categorized by whether they address threats (negative risks) or opportunities (positive risks). Responses for negative risks (threats) are: Avoid, Transfer, Mitigate, and Accept. Responses for positive risks (opportunities) are: Exploit, Share, Enhance, and Accept. Enhance (A) and Share (D) are opportunity-only responses - they increase the probability or impact of a positive event. Exploit (B) is also an opportunity-only response, used to ensure the positive risk occurs. Acceptance (C) applies to both threats and opportunities - the project team decides to acknowledge the risk and not take proactive action, either actively (developing a contingency plan) or passively (doing nothing). It is the only listed option valid for a negative risk.

Topics

#Risk management#Risk response strategies#Negative risk#Threats

Community Discussion

No community discussion yet for this question.

Full CAP Practice