In a large industrial business, an on-going system development project faces a previously identified risk. The risk is adequately managed by the risk manager, however there is still residual risk. Wha

Question

Options

• AUpdate the risk register accordingly and review it in regular project meetings.
• BAccept the risk because residual risks are often low.
• CAsk a subject matter expert (SME) to assess the residual risk and take action.
• DAssign a risk owner and set it as high priority and high impact.

• A
  4% (1)
• B
  4% (1)
• C
  85% (22)
• D
  8% (2)

Explanation

Residual risk is the risk that remains after planned risk responses have been implemented. Even when a risk is 'adequately managed,' residual risk may still require further action. Asking an SME to assess the residual risk (C) ensures that someone with specialized knowledge evaluates whether the remaining risk level is truly acceptable or requires additional treatment. Option A (update the register and review in meetings) is passive and doesn't actively evaluate the residual risk. Option B (accept because residual risks are often low) is incorrect-residual risks must be assessed, not assumed to be low. Option D (assign a high-priority owner) is premature without first assessing the nature and magnitude of the residual risk.

No community discussion yet for this question.