Risk Management Flashcards

A project manager has facilitated a brainstorming session with the team and key stakeholders, resulting in a comprehensive list of potential project risks. To proceed with the risk management process, what is the most appropriate next step?

Answer: Assess the probability and impact of each identified risk to prioritize them.

The correct next step after identifying risks is to perform Qualitative Risk Analysis. This process involves assessing the probability of occurrence and the potential impact of each risk to prioritize them for further analysis or response planning. Monte Carlo simulation is a Quantitative Analysis technique used after initial prioritization. Developing response plans and transferring risks are part of the Plan Risk Responses process, which occurs after risks have been analyzed and prioritized.

A project manager for a construction project is concerned about potential delays and financial losses if a key subcontractor fails to deliver on their commitments. The project manager decides to require the subcontractor to secure a performance bond from an insurance company. Which risk response strategy is being implemented?

Answer: Transfer

The Transfer strategy involves shifting the negative impact of a threat, along with ownership of the response, to a third party. By requiring a performance bond, the financial risk associated with the subcontractor's non-performance is transferred to the insurance company. Avoidance would mean changing the plan to eliminate the risk (e.g., not using the subcontractor). Mitigation would involve actions to reduce the probability or impact (e.g., more frequent check-ins). Acceptance would mean taking no proactive action.

To address a significant schedule risk, the project manager authorizes overtime for the development team. This response successfully gets the project back on schedule but leads to team burnout and an increase in coding defects. This new risk of quality issues is best described as a:

Answer: Secondary risk

A secondary risk is a new risk that arises as a direct result of implementing a risk response. In this scenario, the response to the schedule risk (authorizing overtime) directly created a new risk of quality defects. A residual risk is a risk that remains after a response has been implemented.

Which of the following is a key tool or technique used in the Perform Quantitative Risk Analysis process to model the combined effect of individual project risks and other sources of uncertainty on achieving project objectives?

Answer: Monte Carlo Simulation

Monte Carlo simulation is a quantitative risk analysis technique that uses computer models to simulate the potential outcomes of a project by considering the impact of various risks. It runs the model thousands of times to create a probability distribution of possible project outcomes (e.g., completion dates or costs). A Probability and Impact Matrix is a tool for Qualitative Risk Analysis. SWOT Analysis is a technique for identifying risks. The Risk Register is a document (output), not a technique for this process.

During the Monitor Risks process, the project team is reviewing the risk register. They identify a risk that is no longer relevant because the project phase in which it could have occurred has been completed successfully. What is the most appropriate action regarding this risk?

Answer: Close the risk and document it in the lessons learned register.

The Monitor Risks process includes tracking identified risks and closing out risks that are outdated or have passed. When a risk is no longer applicable, it should be formally closed in the risk register. The outcome and the effectiveness of the process should be documented as part of the lessons learned for the benefit of future projects.

A project manager is creating the Risk Management Plan. Which of the following elements is typically defined within this plan?

Answer: Methodology, roles and responsibilities, and risk categories.

The Risk Management Plan is the output of the Plan Risk Management process and it establishes the framework for how risk management activities will be conducted. It defines the methodology, roles and responsibilities, budget, timing, and risk categories to be used. The detailed list of risks, assignment of owners, and analysis results are all recorded later in the Risk Register during subsequent processes.