Risk Management Framework Flashcards

A project manager is developing the Risk Management Plan for a large, complex construction project. The organization has a standard risk management framework, but the project manager recognizes that it needs to be adapted for the specific needs of this project. Which of the following is the BEST example of tailoring the risk management framework?

Answer: Refining risk thresholds and creating a custom Risk Breakdown Structure (RBS) specific to construction risks.

Tailoring the risk management framework involves adjusting the organization's standard processes to fit the specific context of the project. Refining risk thresholds based on the project's importance and creating a custom RBS for construction-specific risks (e.g., environmental, permits, materials) is a prime example of effective tailoring. The other options represent either not tailoring, partially tailoring in an ineffective way, or a resource assignment choice rather than a framework adaptation.

During the Plan Risk Management process, the project team is discussing the level of risk exposure that the organization is willing to accept in pursuit of its objectives. This specific, measurable level of risk, above which a response is required, is formally known as the:

Answer: Risk Threshold

The Risk Threshold is the specific, measurable level of risk exposure above which risks are deemed unacceptable and require a response. While related, Risk Appetite is the high-level degree of uncertainty an organization is willing to accept, and Risk Tolerance is the specified range of acceptable variation. Risk Attitude is a stakeholder's general disposition towards risk.

Which component of the risk management framework is primarily used to provide a hierarchical structure that helps in the systematic identification and categorization of project risks?

Answer: Risk Breakdown Structure (RBS)

The Risk Breakdown Structure (RBS) is a hierarchical decomposition of potential risks to a project. It organizes risks into categories and subcategories, which facilitates systematic and comprehensive risk identification. The Risk Register is a log of identified risks, the Probability and Impact Matrix is a tool for analysis, and a Risk Audit Report evaluates the effectiveness of the risk process.

A project manager is leading a software development project using a hybrid approach. The organizational risk management framework was designed primarily for predictive (waterfall) projects. When creating the project's risk management plan, what is a key consideration for the project manager?

Answer: The risk management processes should be tailored to accommodate the iterative nature of the agile components.

An effective risk management framework should be adaptable. When dealing with a hybrid project, the project manager must tailor the existing framework to fit the delivery approach. This involves adapting processes to be more iterative, allowing for emergent risks to be identified and managed throughout the project lifecycle, rather than only at the beginning.

In the context of a mature risk management framework, what is the primary purpose of establishing predefined risk categories?

Answer: To provide a structure for consistent risk identification and analysis across projects.

Establishing predefined risk categories (often within a Risk Breakdown Structure) is a core part of a risk management framework. Its main purpose is to ensure a systematic, consistent, and comprehensive approach to identifying and organizing risks, which helps improve the quality of risk analysis and communication.

A project is initiated within a company that has a well-defined risk management framework. According to PMI standards, which of the following should be one of the FIRST steps the project manager takes regarding this framework?

Answer: Review and tailor the organization-mandated framework to define the project's specific risk management plan.

The foundational step is to create the Risk Management Plan. This plan defines how risk management activities will be structured and performed for the specific project. A key input to this process is the organization's overall risk management framework, which must be reviewed and tailored to the project's needs. Identifying risks and developing responses happens after the plan is established.