Project Risk Management Risk Appetite, Tolerance & Governance 2 — Questions and Answers
Question 1: Risk thresholds are most useful for:
- Determining when a risk requires escalation or a change in response strategy (Correct answer)
- Calculating the total budget contingency reserve
- Identifying new risks during planning
- Assigning risk owners to individual risks
Correct answer: Determining when a risk requires escalation or a change in response strategy
Thresholds define the point at which a risk's severity demands a different management action, such as escalation or an immediate response plan.
Question 2: Which of the following best describes a risk-averse organization?
- One that prefers low-risk options even when higher-risk options offer greater rewards (Correct answer)
- One that pursues the highest-return options regardless of risk level
- One that has no documented risk appetite
- One that transfers all risks to contractors
Correct answer: One that prefers low-risk options even when higher-risk options offer greater rewards
A risk-averse organization prioritizes stability and predictability, accepting lower returns to avoid uncertainty or potential losses.
Question 3: How should a project manager respond when a proposed risk response exceeds the project's risk tolerance?
- Escalate the decision to the appropriate governance authority (Correct answer)
- Implement the response without approval
- Reject the response and accept the risk
- Document the issue and continue without changes
Correct answer: Escalate the decision to the appropriate governance authority
Decisions that exceed project authority or tolerance must be escalated to the governance body with the power to approve or reject the proposed approach.
Question 4: Which concept describes the maximum loss an organization can absorb without threatening its strategic objectives?
- Risk capacity (Correct answer)
- Risk appetite
- Risk velocity
- Risk probability
Correct answer: Risk capacity
Risk capacity is the maximum level of risk an organization can absorb given its financial strength, resources, and strategic goals.
Question 5: A project governance framework for risk management typically includes:
- Clear roles, escalation paths, decision authority levels, and reporting structures (Correct answer)
- Only the risk register and probability matrix
- Individual team members' personal risk preferences
- The project schedule and WBS only
Correct answer: Clear roles, escalation paths, decision authority levels, and reporting structures
Effective risk governance defines who owns risks, who can approve responses, how risks are escalated, and how risk information flows through the organization.
Question 6: When an organization's risk appetite changes during a project, the project manager should:
- Review and update the risk management plan and reassess existing risk responses (Correct answer)
- Continue using the original risk thresholds until the project ends
- Immediately close all open risks
- Request a new project charter
Correct answer: Review and update the risk management plan and reassess existing risk responses
A change in organizational risk appetite affects the acceptability of existing risks and the appropriateness of current responses, requiring a reassessment.
Project Risk Management Risk Appetite, Tolerance & Governance 2
Risk thresholds are most useful for: