nerdexam
(ISC)2

CSSLP · Question #45

Bill is the project manager of the JKH Project. He and the project team have identified a risk event in the project with a high probability of occurrence and the risk event has a high cost impact on t

The correct answer is D. Avoidance. By removing the requirements that caused the high-probability, high-impact risk, the project team and customer have chosen to eliminate the risk altogether. This strategy is known as risk avoidance, as the project's scope is adjusted to prevent the risk from ever occurring.

Secure Software Lifecycle Management

Question

Bill is the project manager of the JKH Project. He and the project team have identified a risk event in the project with a high probability of occurrence and the risk event has a high cost impact on the project. Bill discusses the risk event with Virginia, the primary project customer, and she decides that the requirements surrounding the risk event should be removed from the project. The removal of the requirements does affect the project scope, but it can release the project from the high risk exposure. What risk response has been enacted in this project?

Options

  • AMitigation
  • BTransference
  • CAcceptance
  • DAvoidance

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    7% (2)
  • D
    85% (23)

Why each option

By removing the requirements that caused the high-probability, high-impact risk, the project team and customer have chosen to eliminate the risk altogether. This strategy is known as risk avoidance, as the project's scope is adjusted to prevent the risk from ever occurring.

AMitigation

Mitigation involves reducing the probability or impact of a risk, not eliminating the risk by changing the project scope.

BTransference

Transference involves shifting the financial consequences of a risk to a third party, such as through insurance, which is not what happened here.

CAcceptance

Acceptance involves acknowledging the risk and deciding not to take any action unless the risk occurs, which is contrary to the active decision to remove requirements.

DAvoidanceCorrect

Risk avoidance is a strategy where the project team changes the project plan to eliminate the threat entirely, typically by removing the cause of the risk. In this scenario, removing the requirements that lead to the risk event completely eliminates the high risk exposure from the project.

Concept tested: Project risk management- risk avoidance

Source: https://www.pmi.org/learning/library/risk-management-strategies-avoid-mitigate-transfer-accept-6577

Topics

#Risk Management#Risk Response#Risk Avoidance#Project Scope Management

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice