nerdexam
(ISC)2

CAP · Question #164

You work as a project manager for BlueWell Inc. You with your team are using a method or a (technical) process that conceives the risks even if all theoretically possible safety measures would be…

The correct answer is B. It is a risk that remains after planned risk responses are taken. A residual risk is the leftover risk that persists even after risk response plans have been implemented. For example, if you transfer a risk via insurance, there may still be a deductible or coverage gap - that remaining exposure is the residual risk. It differs from a…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

You work as a project manager for BlueWell Inc. You with your team are using a method or a (technical) process that conceives the risks even if all theoretically possible safety measures would be applied. One of your team member wants to know that what is a residual risk. What will you reply to your team member?

Options

  • AIt is a risk that remains because no risk response is taken.
  • BIt is a risk that remains after planned risk responses are taken.
  • CIt is a risk that can not be addressed by a risk response.
  • DIt is a risk that will remain no matter what type of risk response is offered.

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    88% (22)
  • D
    4% (1)

Explanation

A residual risk is the leftover risk that persists even after risk response plans have been implemented. For example, if you transfer a risk via insurance, there may still be a deductible or coverage gap - that remaining exposure is the residual risk. It differs from a secondary risk, which is a new risk created as a direct result of implementing a risk response. Choice D is a distractor - the phrase 'no matter what type of risk response is offered' is too absolute; residual risk specifically refers to what remains after planned responses, not an immovable constant.

Topics

#Residual Risk#Risk Management#Risk Response

Community Discussion

No community discussion yet for this question.

Full CAP Practice