PMI-RMP - PMI Risk Management Professional Risk Management Framework Questions and Answers 1 — Questions and Answers
Question 1: A project manager is developing the Risk Management Plan for a large, complex construction project. The organization has a standard risk management framework, but the project manager recognizes that it needs to be adapted for the specific needs of this project. Which of the following is the BEST example of tailoring the risk management framework?
- Adhering strictly to every process and template in the corporate framework to ensure compliance.
- Refining risk thresholds and creating a custom Risk Breakdown Structure (RBS) specific to construction risks. (Correct answer)
- Using only the risk register template from the organizational framework and ignoring other elements.
- Assigning all risk management responsibilities to a single dedicated risk officer.
Correct answer: Refining risk thresholds and creating a custom Risk Breakdown Structure (RBS) specific to construction risks.
Tailoring the risk management framework involves adjusting the organization's standard processes to fit the specific context of the project. Refining risk thresholds based on the project's importance and creating a custom RBS for construction-specific risks (e.g., environmental, permits, materials) is a prime example of effective tailoring. The other options represent either not tailoring, partially tailoring in an ineffective way, or a resource assignment choice rather than a framework adaptation.
Question 2: During the Plan Risk Management process, the project team is discussing the level of risk exposure that the organization is willing to accept in pursuit of its objectives. This specific, measurable level of risk, above which a response is required, is formally known as the:
- Risk Attitude
- Risk Appetite
- Risk Threshold (Correct answer)
- Risk Tolerance
Correct answer: Risk Threshold
The Risk Threshold is the specific, measurable level of risk exposure above which risks are deemed unacceptable and require a response. While related, Risk Appetite is the high-level degree of uncertainty an organization is willing to accept, and Risk Tolerance is the specified range of acceptable variation. Risk Attitude is a stakeholder's general disposition towards risk.
Question 3: Which component of the risk management framework is primarily used to provide a hierarchical structure that helps in the systematic identification and categorization of project risks?
- Risk Register
- Probability and Impact Matrix
- Risk Breakdown Structure (RBS) (Correct answer)
- Risk Audit Report
Correct answer: Risk Breakdown Structure (RBS)
The Risk Breakdown Structure (RBS) is a hierarchical decomposition of potential risks to a project. It organizes risks into categories and subcategories, which facilitates systematic and comprehensive risk identification. The Risk Register is a log of identified risks, the Probability and Impact Matrix is a tool for analysis, and a Risk Audit Report evaluates the effectiveness of the risk process.
Question 4: A project manager is leading a software development project using a hybrid approach. The organizational risk management framework was designed primarily for predictive (waterfall) projects. When creating the project's risk management plan, what is a key consideration for the project manager?
- The framework cannot be used and a new one must be created from scratch.
- The risk management processes should be tailored to accommodate the iterative nature of the agile components. (Correct answer)
- All risks must be identified and fully planned for before the first sprint begins.
- The project sponsor must formally approve waiving the use of the organizational framework.
Correct answer: The risk management processes should be tailored to accommodate the iterative nature of the agile components.
An effective risk management framework should be adaptable. When dealing with a hybrid project, the project manager must tailor the existing framework to fit the delivery approach. This involves adapting processes to be more iterative, allowing for emergent risks to be identified and managed throughout the project lifecycle, rather than only at the beginning.
Question 5: In the context of a mature risk management framework, what is the primary purpose of establishing predefined risk categories?
- To guarantee that all identified risks will be successfully mitigated.
- To assign a single risk owner to each category for accountability.
- To provide a structure for consistent risk identification and analysis across projects. (Correct answer)
- To eliminate the need for qualitative and quantitative risk analysis.
Correct answer: To provide a structure for consistent risk identification and analysis across projects.
Establishing predefined risk categories (often within a Risk Breakdown Structure) is a core part of a risk management framework. Its main purpose is to ensure a systematic, consistent, and comprehensive approach to identifying and organizing risks, which helps improve the quality of risk analysis and communication.
Question 6: A project is initiated within a company that has a well-defined risk management framework. According to PMI standards, which of the following should be one of the FIRST steps the project manager takes regarding this framework?
- Immediately begin identifying individual project risks.
- Conduct a risk audit of a recently completed project.
- Review and tailor the organization-mandated framework to define the project's specific risk management plan. (Correct answer)
- Develop risk response strategies for the most common risks in the industry.
Correct answer: Review and tailor the organization-mandated framework to define the project's specific risk management plan.
The foundational step is to create the Risk Management Plan. This plan defines how risk management activities will be structured and performed for the specific project. A key input to this process is the organization's overall risk management framework, which must be reviewed and tailored to the project's needs. Identifying risks and developing responses happens after the plan is established.
A project manager is developing the Risk Management Plan for a large, complex construction project.
The organization has a standard risk management framework, but the project manager recognizes that it needs to be adapted for the specific needs of this project.
Which of the following is the BEST example of tailoring the risk management framework?