CRA Risk Dashboard & Heat Maps 2 — Questions and Answers
Question 1: On a risk heat map, what does the X-axis typically represent?
- Risk likelihood or probability (Correct answer)
- Risk impact or severity
- Risk owner name
- Risk mitigation cost
Correct answer: Risk likelihood or probability
The X-axis of a standard risk heat map represents the likelihood or probability that a risk event will occur.
Question 2: Which dashboard KPI best signals that risk appetite thresholds are being breached in real time?
- Average risk score across all categories
- Number of open risk items
- RAG (Red-Amber-Green) status indicators tied to tolerance limits (Correct answer)
- Total number of risk owners assigned
Correct answer: RAG (Red-Amber-Green) status indicators tied to tolerance limits
RAG indicators linked to predefined tolerance limits give immediate visual alerts when appetite thresholds are exceeded.
Question 3: A risk manager notices that several high-impact risks are clustered in the lower-left of the heat map. What does this indicate?
- High impact and high likelihood requiring immediate escalation
- High impact but low likelihood, suggesting monitoring rather than immediate action (Correct answer)
- Low impact and low likelihood, meaning risks can be ignored
- Low impact and high likelihood, requiring daily review
Correct answer: High impact but low likelihood, suggesting monitoring rather than immediate action
Lower-left placement (low likelihood, high impact) typically indicates risks worth monitoring but not yet requiring immediate escalation.
Question 4: What is a primary limitation of a static risk heat map?
- It cannot display more than five risk categories
- It fails to capture changes in risk exposure over time (Correct answer)
- It requires proprietary software to produce
- It only works for financial risks
Correct answer: It fails to capture changes in risk exposure over time
Static heat maps represent a point-in-time snapshot and do not reflect dynamic changes in risk likelihood or impact as conditions evolve.
Question 5: Which element of a risk dashboard enables trend analysis across multiple reporting periods?
- Pie chart of risk categories
- Sparklines or time-series charts embedded in KRI panels (Correct answer)
- Color-coded risk matrix
- Risk owner directory
Correct answer: Sparklines or time-series charts embedded in KRI panels
Sparklines and time-series charts embedded in KRI panels allow viewers to see how key risk indicators have changed over successive periods.
Question 6: When calibrating heat map color zones, which approach aligns risk zones with organizational risk appetite?
- Using a fixed 3x3 grid with equal color zones regardless of strategy
- Setting zone boundaries based on the board-approved risk appetite and tolerance statements (Correct answer)
- Copying color zones from an industry peer's published heat map
- Assigning colors randomly to maintain objectivity
Correct answer: Setting zone boundaries based on the board-approved risk appetite and tolerance statements
Zone boundaries should reflect the organization's own approved appetite and tolerance levels so the heat map is actionable and meaningful.
Question 7: A CRA candidate is designing a dashboard for senior executives. Which characteristic is most important?
- Maximum data granularity with all raw data visible
- Drill-down capability hidden behind multiple menus
- Concise top-level summary with exception-based highlighting (Correct answer)
- Equal space allocated to every risk regardless of severity
Correct answer: Concise top-level summary with exception-based highlighting
Executive dashboards should surface exceptions and key metrics at a glance, enabling rapid decision-making without overwhelming detail.
CRA Risk Dashboard & Heat Maps 2
On a risk heat map, what does the X-axis typically represent?