Risk Management & Mitigation Flashcards
7 cards from real ATA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk Management & Mitigation flashcards as text
A tutor uses a student's name and photo in marketing materials without written consent. This action primarily creates which type of risk?
Answer: Legal and reputational risk related to privacy law violations
Using a student's personally identifiable information without consent can violate FERPA and other privacy laws, creating legal and reputational exposure.
Which of the following is a key principle of FERPA that tutors working in school-based programs must understand?
Answer: Student education records are confidential and require parental or eligible student consent to disclose
FERPA protects the privacy of student education records and generally requires consent before disclosure, covering K-12 and post-secondary institutions.
A tutoring center experiences a data breach exposing student information. Which response step aligns with best practices in risk mitigation?
Answer: Notify affected families, document the breach, and review security protocols
Notifying affected parties, documenting the breach, and reviewing security protocols are the core steps in an effective data breach response.
In a risk matrix, a risk classified as 'high likelihood / high impact' should be:
Answer: Prioritized for immediate mitigation strategies
Risks in the high likelihood/high impact quadrant represent the greatest threat and should receive the highest priority for mitigation resources.
A tutor working online with students in different states should be aware that:
Answer: State-specific regulations regarding online education and minor protection may apply
Different states have varying laws on online education, mandatory reporting, and the protection of minors, requiring tutors to understand applicable state regulations.
Which action represents 'risk avoidance' for a tutor?
Answer: Declining to tutor subjects outside one's areas of certified competence
Declining to tutor outside one's competence eliminates the risk of providing inaccurate instruction by avoiding the risky activity altogether.
A tutor's business continuity plan should PRIMARILY address:
Answer: How tutoring services will continue if a major disruption occurs
A business continuity plan outlines how an organization will maintain essential functions during and after a significant disruption such as illness, technical failure, or natural disaster.