nerdexam
(ISC)2

CGRC · Question #599

Which of the following is a risk that is created by the response to another risk? Response:

The correct answer is A. Secondary risk. A secondary risk is a new risk that is created or increased as a direct consequence of implementing a response to another identified risk.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following is a risk that is created by the response to another risk? Response:

Options

  • ASecondary risk
  • BResidual risk
  • CPositive risk
  • DNegative risk

How the community answered

(53 responses)
  • A
    91% (48)
  • B
    2% (1)
  • C
    6% (3)
  • D
    2% (1)

Why each option

A secondary risk is a new risk that is created or increased as a direct consequence of implementing a response to another identified risk.

ASecondary riskCorrect

A secondary risk specifically refers to a new risk that emerges or an existing risk that intensifies as a result of implementing a mitigation, acceptance, or other response strategy for an initial identified risk event.

BResidual risk

Residual risk is the remaining risk after all planned risk responses have been carried out, meaning the initial risk was not completely eliminated.

CPositive risk

Positive risk, also known as an opportunity, is an event that, if it occurs, has a beneficial impact on project objectives.

DNegative risk

Negative risk, also known as a threat, is an event that, if it occurs, has an adverse impact on project objectives.

Concept tested: Risk Management Terminology

Source: https://www.pmi.org/pmbok-guide-standards/foundational/pmbok

Topics

#Risk Management#Risk Response#Secondary Risk

Community Discussion

No community discussion yet for this question.

Full CGRC Practice