PMI-RMP Question #504: Real Exam Question with Answer & Explanation

Question

An organization with a large computer network identified a potential cyber security threat. Although certain measures were implemented to avoid the risk, the cyber security threat occurs. The measures were partially successful and a new unforeseen risk emerges. What should the risk owner do?

Options

• ADevelop an efficient network protection solution quickly to mitigate the risk.
• BEscalate the case to the risk manager and wait for their instructions.
• CConduct an analysis to determine the root cause of the failed response.
• DApply a work around to eliminate or mitigate the impact of the threat.

Explanation

One of the tools and techniques for the implement risk responses process is root cause analysis. Root cause analysis is a technique that focuses on identifying the fundamental reason for the occurrence of a problem or a risk. By conducting a root cause analysis, the risk owner can determine why the implemented measures were only partially successful and what caused the new unforeseen risk to emerge. This can help the risk owner to identify and implement more effective risk responses, as well as to update the risk register and the risk report with the new

No community discussion yet for this question.