Threat Response Strategies Flashcards

A risk owner decides to relocate a server to a different data center to eliminate a flooding threat entirely. Which threat response strategy is this?

Answer: Avoid

Eliminating the threat entirely by changing the project plan so the risk can no longer occur is the Avoid strategy.

Which threat response strategy involves shifting both the impact and ownership of a risk to a third party?

Answer: Transfer

Transfer moves the negative impact and response ownership to a third party, often via insurance or contracts.

A team adds extra testing cycles to lower the probability of a defect-related threat. This is best described as:

Answer: Mitigate

Reducing the probability or impact of a threat to an acceptable level is the Mitigate strategy.

When a project team establishes a contingency reserve but takes no proactive action against a low-priority threat, which strategy is being used?

Answer: Active acceptance

Active acceptance acknowledges the risk and sets aside a contingency reserve without changing the plan to address it.

A threat is outside the project manager's authority and affects the wider organization. The appropriate response is to:

Answer: Escalate it

Escalation is used when a threat is beyond the project's scope or the PM's authority and must be addressed at a higher level.

Outsourcing a complex software module to a specialized vendor with a fixed-price contract to reduce a threat is an example of:

Answer: Transfer

A fixed-price contract transfers the cost-overrun threat to the vendor, making it a Transfer strategy.

Which document records the chosen threat response strategy and the assigned risk owner?

Answer: Risk register

The risk register captures identified risks, their responses, and the assigned risk owners.