Presentations Risk Assessment & Management 4

Question 1

A cybersecurity analyst is presenting a risk scenario using the STRIDE model. What does the 'T' in STRIDE represent?

Accepted Answer

Tampering

Answer

In the STRIDE threat model, 'T' stands for Tampering, which refers to unauthorized modification of data or systems.

Question 2

During a presentation on operational risk, a manager distinguishes between 'key risk indicators' (KRIs) and 'key performance indicators' (KPIs). What is the primary function of a KRI?

Accepted Answer

To provide early warning signals of increasing risk exposure

Answer

KRIs are forward-looking metrics that signal when risk levels are rising, allowing proactive intervention before an incident occurs.

Question 3

A risk presentation explains the concept of a 'bow-tie' diagram. What does the left side of the bow-tie represent?

Accepted Answer

Causes and preventive controls leading to the risk event

Answer

The left side of a bow-tie diagram maps threats and preventive barriers that stop the risk event from occurring.

Question 4

In a risk presentation for a construction project, the speaker refers to 'force majeure.' What type of risk does this term describe?

Accepted Answer

Unforeseeable external events beyond any party's control

Answer

Force majeure refers to extraordinary events—such as natural disasters or wars—that are beyond the control of any contracting party.

Question 5

When presenting a risk communication plan, which principle is MOST important for conveying risk information to a general public audience?

Accepted Answer

Use plain language and avoid technical jargon

Answer

Effective risk communication to non-expert audiences requires clear, accessible language free of technical terminology to ensure comprehension.

Presentations Practice Test

Presentations Practice Test

Presentations Risk Assessment & Management 4