Risk Appetite and Tolerance Flashcards

A project team proposes a high-risk strategy with potential 40% cost savings. The organization's risk appetite is low. What should the PMI-RMP practitioner recommend?

Answer: Evaluate whether the strategy aligns with organizational risk appetite before proceeding

Risk decisions must be evaluated against the organization's defined risk appetite to ensure alignment with strategic governance.

Which document formally records the organization's risk appetite and thresholds for a project?

Answer: Risk management plan

The risk management plan captures risk appetite, tolerance levels, and thresholds that will govern all risk decisions throughout the project.

A utility function in risk management is used to:

Answer: Model an individual or organization's attitude toward risk relative to monetary outcomes

A utility function maps monetary outcomes to subjective value, revealing whether a stakeholder is risk-averse, risk-neutral, or risk-seeking.

Risk thresholds help a project team by:

Answer: Defining the point at which a risk requires escalation or active response

Thresholds provide clear, objective criteria that trigger action, ensuring risks are addressed before they breach acceptable limits.

Organizational risk appetite should be reassessed when:

Answer: Significant changes occur in the organization's strategic environment or objectives

Major shifts in business environment, strategy, or leadership can alter organizational risk appetite and require formal reassessment.

A project involves regulatory compliance. The organization's risk appetite for compliance risks is near-zero. This means:

Answer: Even minor compliance risks require immediate attention and robust response plans

Near-zero appetite means the organization will not tolerate compliance deviations, requiring strong controls and immediate escalation for any such risk.