Which of the following best describes the meaning of "Initial Level of Risk" in Risk Management?

The correct answer is D. The categorization before determining and implementing mitigating actions. In TOGAF Risk Management, the 'Initial Level of Risk' is defined as the risk categorization assessed before any mitigating actions have been determined or implemented. It represents the raw, unmitigated exposure level - essentially the inherent risk. Once mitigation strategies…

Submitted by yousef_jo· Apr 18, 2026Core Concepts

Question

Options

AThe categorization after implementation of mitigating actions
BThe categorization after initial risk assessment
CThe categorization after mitigation and residual risk assessment
DThe categorization before determining and implementing mitigating actions
EThe categorization before risk identification

How the community answered

(49 responses)

A
2% (1)
C
4% (2)
D
88% (43)
E
6% (3)

Explanation

In TOGAF Risk Management, the 'Initial Level of Risk' is defined as the risk categorization assessed before any mitigating actions have been determined or implemented. It represents the raw, unmitigated exposure level - essentially the inherent risk. Once mitigation strategies are identified and applied, the remaining exposure is called the 'Residual Level of Risk.' Understanding both levels allows architects and stakeholders to evaluate the effectiveness of mitigations and determine whether the residual risk is acceptable.

Topics

#Risk Management#Initial Risk#Risk Assessment#Mitigation

Community Discussion

No community discussion yet for this question.

Full OG0-091 Practice