CAP Risk Management & Mitigation 2 — Questions and Answers
Question 1: During the business problem framing stage of a CAP analytics project, what is the primary purpose of a risk register?
- To track the budget spent on data acquisition activities
- To record all stakeholder contact information for the project
- To list the software licenses required for model deployment
- To document identified risks, their likelihood, impact, and planned responses (Correct answer)
Correct answer: To document identified risks, their likelihood, impact, and planned responses
A risk register catalogs identified risks with their probability, impact, and mitigation plans so they can be monitored throughout the project.
Question 2: An analytics team discovers that a key data source may be discontinued mid-project. Transferring this risk would most likely involve which action?
- Adding more analysts to the project team
- Redesigning the model to avoid needing any external data
- Negotiating a contractual guarantee or SLA with the data vendor (Correct answer)
- Ignoring the issue until the vendor announces a decision
Correct answer: Negotiating a contractual guarantee or SLA with the data vendor
Risk transfer shifts the consequence to a third party, typically via contracts, SLAs, or insurance.
Question 3: Which situation best illustrates model risk in a deployed analytics solution?
- A server outage temporarily prevents users from logging into the dashboard
- A data engineer leaves the company and is replaced within a week
- A stakeholder requests an additional KPI on a monthly report
- A pricing model keeps being used after market conditions change, producing systematically biased recommendations (Correct answer)
Correct answer: A pricing model keeps being used after market conditions change, producing systematically biased recommendations
Model risk arises when a model is wrong or misused, such as applying it under conditions that no longer match its assumptions.
Question 4: In a qualitative risk assessment, risks are typically prioritized using which two dimensions?
- Cost of mitigation and length of documentation
- Number of stakeholders and size of the dataset
- Probability of occurrence and magnitude of impact (Correct answer)
- Model accuracy and data storage cost
Correct answer: Probability of occurrence and magnitude of impact
Qualitative risk analysis ranks risks by combining their likelihood and potential impact, often in a probability-impact matrix.
Question 5: A CAP-certified analyst chooses to proceed with a project despite a known small chance of minor data latency issues, documenting the decision. This is an example of which risk response?
- Avoidance
- Transfer
- Escalation to regulators
- Acceptance (Correct answer)
Correct answer: Acceptance
Risk acceptance means acknowledging a risk and proceeding without active mitigation because its expected impact is tolerable.
Question 6: Which practice most directly mitigates the risk of analytics results being misinterpreted by business stakeholders?
- Restricting access to results so fewer people can see them
- Using more complex models so results appear more authoritative
- Reporting only point estimates to keep messages simple
- Clearly communicating assumptions, limitations, and uncertainty alongside the results (Correct answer)
Correct answer: Clearly communicating assumptions, limitations, and uncertainty alongside the results
Transparent communication of assumptions, limitations, and uncertainty helps stakeholders interpret findings correctly.
Question 7: What is the main risk of proceeding to model building before stakeholders agree on the analytics problem statement?
- Data storage costs will automatically double
- The model will always overfit the training data
- The team may solve the wrong problem, wasting resources and eroding stakeholder trust (Correct answer)
- The project will be exempt from validation requirements
Correct answer: The team may solve the wrong problem, wasting resources and eroding stakeholder trust
Without an agreed problem statement, the analysis may address the wrong question, making the deliverable unusable regardless of technical quality.
During the business problem framing stage of a CAP analytics project, what is the primary purpose of a risk register?