PMI-RMP Question #560: Real Exam Question with Answer & Explanation

Question

A company manages confidential customer information, and a data breach exposing sensitive information was discovered. What should the risk manager do?

Options

• AExecute the security risks contingency plan.
• BGet a report of customers affected by the risk.
• CIdentify residual and secondary risks.
• DCoordinate a response with the risk owner.

Explanation

The risk owner is the person assigned the responsibility of monitoring the risk and implementing the risk response plan. The risk owner should be involved in the risk response execution and evaluation, and should communicate the results and outcomes to the relevant stakeholders. In the case of a data breach, the risk owner should coordinate a response with the risk manager and other parties involved, such as the security team, the legal team, the customer service team, and the senior management. The risk owner should also report the status of the risk and the effectiveness of the response plan to the risk manager. The risk manager should oversee the risk response process and ensure that the risk is handled appropriately and in alignment with the project objectives and stakeholder expectations.

No community discussion yet for this question.