The team has just completed a risk response planning session and identified responses for all the high and medium priority risks. What should the team do with the remaining low priority risks?

Question

Options

• ACreate risk responses later, as time allows.
• BAdd the risks to a watchlist for periodic monitoring.
• CRemove the risks from the risk register.
• DConduct a low priority risk response planning workshop with key stakeholders.

• A
  8% (5)
• B
  15% (10)
• C
  3% (2)
• D
  74% (48)

Explanation

Option D is correct because low-priority risks still require documented responses - they shouldn't be ignored, just handled proportionately, and a focused workshop with stakeholders ensures they receive appropriate (if lighter) treatment within the formal risk management process. Option A is wrong because deferring responses indefinitely violates the structured approach that risk management requires - "as time allows" often means never. Option C is wrong because removing risks from the register eliminates the organization's visibility into them; risks don't disappear just because they're low priority. Option B is tempting since watchlists are commonly used, but a watchlist is a monitoring tool - it doesn't replace the need to actually plan a response, which is the step the team is currently in.

Memory tip: Think of risks like emails - you triage them by priority, but you still need a plan for every one. Low-priority risks get a "brief reply template" (a simple response plan), not deletion from your inbox or a vague reminder to "deal with it later."

No community discussion yet for this question.