OG0-093 · Question #112
Complete the sentence. The TOGAF risk categorization after the implementation of mitigating actions is known as the level of risk.
The correct answer is D. Residual. In the TOGAF risk management framework, the level of risk remaining after all planned mitigating actions have been successfully implemented is referred to as residual risk.
Question
Complete the sentence. The TOGAF risk categorization after the implementation of mitigating actions is known as the level of risk.
Options
- ACritical
- BInitial
- CIntermediate
- DResidual
- EUnmitigated
How the community answered
(25 responses)- A4% (1)
- C4% (1)
- D92% (23)
Why each option
In the TOGAF risk management framework, the level of risk remaining after all planned mitigating actions have been successfully implemented is referred to as residual risk.
Critical risk indicates a high severity level but does not specifically refer to the risk level remaining after mitigation.
Initial risk refers to the risk level *before* any mitigating actions have been considered or implemented.
Intermediate risk is not a standard, recognized TOGAF risk categorization term for risk after mitigation.
Residual risk represents the level of risk that persists after an organization has applied controls or mitigating actions to address identified risks, effectively signifying the remaining risk that the organization is prepared to accept. TOGAF's risk management process involves assessing initial risks, formulating mitigation strategies, and subsequently re-evaluating the diminished, or residual, risk.
Unmitigated risk is synonymous with initial risk, denoting the risk level present before any actions are taken to reduce it.
Concept tested: TOGAF risk management - residual risk
Source: https://pubs.opengroup.org/architecture/togaf10-doc/arch/chap29.html
Topics
Community Discussion
No community discussion yet for this question.