Which of the following is a risk that is created by the response to another risk?

The correct answer is A. Secondary risk. A secondary risk is a new risk that arises directly as a result of implementing a risk response. For example, if you hire a contractor to address a project risk (primary risk response), the contractor underperforming becomes a secondary risk. This differs from residual risk…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

ASecondary risk
BResidual risk
CPositive risk
DNegative risk

How the community answered

(20 responses)

A
90% (18)
B
5% (1)
D
5% (1)

Explanation

A secondary risk is a new risk that arises directly as a result of implementing a risk response. For example, if you hire a contractor to address a project risk (primary risk response), the contractor underperforming becomes a secondary risk. This differs from residual risk, which is the leftover risk that remains after a risk response has been applied to the original risk. Positive and negative risk refer to the nature (opportunity vs. threat) of a risk, not its origin.

Topics

#Risk management#Secondary risk#Risk response#Risk terminology

Community Discussion

No community discussion yet for this question.

Full CAP Practice