At the beginning of an IT development project key risks were identified and assessed and risk owners were appointed Six months later the IT development team reported that the project Is…

Question

Options

• ARisk response.
• BRisk assessment
• CRisk monitoring.
• DRisk avoidance.

• A
  4% (1)
• B
  83% (19)
• C
  9% (2)
• D
  4% (1)

Explanation

Risk assessment is the practice that needs improvement because the initial assessment failed to adequately identify or evaluate the severity of critical, foreseeable risks - specifically, budget overrun, schedule slippage, and key personnel attrition. These are common IT project risks that a thorough assessment should have surfaced and rated appropriately, enabling proactive planning.

Why the distractors are wrong:

• A (Risk response) is premature to evaluate - you can't craft effective responses to risks that were never properly assessed in the first place; the failure occurred upstream.
• C (Risk monitoring) is a reasonable-sounding distractor, but monitoring assumes you have well-defined risks to track; the scenario implies these risks weren't on anyone's radar, not that they were watched and ignored.
• D (Risk avoidance) is just one specific risk response strategy, not a fundamental practice, and the scenario gives no indication that avoidance was an appropriate or chosen approach here.

Memory tip: Think of risk assessment as the GPS coordinates - if you enter the wrong destination (poor assessment), it doesn't matter how well you drive (monitor/respond). The scenario's clue is that problems appeared as surprises six months in, which signals the assessment missed them entirely, not that known risks were mismanaged afterward.

No community discussion yet for this question.