with all Correct & 100% Verified Answers |Latest Version
|Already Graded A+
The effect of uncertainty on objectives
The chance of something happening that will have an impact on objectives
Being prepared for the worst and being poised to exploit opportunities as they are discovered
✔Correct Answer-Risks
Meeting or exceeding an organization's objectives
Adhering to control-based objectives, rules and/or controls
Complying with regulatory requirements ✔Correct Answer-Risk management strategies'
general focus
Risk management professional's role in Implementing Risk Strategies ✔Correct Answer-
Communication and Consultation
Finding, Recognizing and Recording Risks ✔Correct Answer-Risk Identification Process
The process of characterizing and understanding the nature of risk and of considering the level
of risk in the context of the organization's willingness to accept risk. ✔Correct Answer-Risk
Analysis
Risk is typically analyzed on the basis of ✔Correct Answer-Likelihood, Consequences, other
criteria such as timing, duration, vulnerability and interdependencies
hazard analysis technique (cause and consequence) ✔Correct Answer-Bow tie analysis
consider business impacts at a location or from a specific process ✔Correct Answer-Business
impact analysis
determine steps to improve the organization's capacity to move from a current state to a
desired, future state. (current available factors, success factors needed to achieve future desired
objectives, highlighting the gaps) ✔Correct Answer-Gap analysis
multiple techniques designed to identify the underlying or initiating risk sources or drivers.
(fault tree analysis, event tree analysis, failure mode and effect analysis and cause-and-effect
analysis - fish bone diagram) ✔Correct Answer-Root Cause Analysis
identify the strength of influencing factors and help determine potential weighting for
consideration during the risk assessment process. Define root causes for major risks, define the
, chain of events likely in a scenario and become the foundation for further modeling.
✔Correct Answer-Influence analysis/diagrams
compile risk into a risk register to analyze and manage those risks in an organized way, typically
by category. ✔Correct Answer-Risk Register Analysis
process of analyzing possible and plausible future events by considering alternative settings,
circumstances and outcomes. It provides a basis for making decisions in the context of different
conditions. ✔Correct Answer-Scenario analysis
leaders at each site perform an assessment by analyzing and evaluating the potential risks
based on what is being produced at the site and its environmental factors. This may include
threat, vulnerability and criticality analyses. ✔Correct Answer-Site analysis
strengths and weaknesses (internal), opportunities and threats (external) ✔Correct Answer-
SWOT analysis
mathematical technique that generates random variables for modelling risk or uncertainty of a
certain system (simulation). The random variables or inputs are modelled on the basis of
probability distributions ✔Correct Answer-Monte Carlo analysis
a form of simulation used to determine reactions to different situations. Also used to gauge how
certain stressors will affect a company or industry. ✔Correct Answer-Stress analysis
Examples of qualitative methodology for analyzing data ✔Correct Answer-Influence diagrams,
scenario analysis, site analysis, SWOT
Examples of combined methodology for analyzing data ✔Correct Answer-Bowtie, business
impact analysis, fault tree, cause/consequence analysis
Examples of quantitative methodology for analyzing data ✔Correct Answer-Monte Carlo,
stress analysis
uses which risk criteria (risk appetite, risk tolerance, outputs from risk identification and risk
analysis process) to determine which risks are acceptable and which require additional
modification or treatment ✔Correct Answer-Risk evaluation
is the total exposed amount that an organization wishes to undertake on the basis of risk-return
trade-offs for one or more desire and expected outcomes. ✔Correct Answer-Risk appetite
is the amount of uncertainty an organization is prepared to accept in total - or more narrowly,
within a certain business unit, a particular risk category, or for a specific initiative. ✔Correct
Answer-Risk tolerance