Risk Appetite, Tolerance & Governance Flashcards

Risk thresholds are most useful for:

Answer: Determining when a risk requires escalation or a change in response strategy

Thresholds define the point at which a risk's severity demands a different management action, such as escalation or an immediate response plan.

Which of the following best describes a risk-averse organization?

Answer: One that prefers low-risk options even when higher-risk options offer greater rewards

A risk-averse organization prioritizes stability and predictability, accepting lower returns to avoid uncertainty or potential losses.

How should a project manager respond when a proposed risk response exceeds the project's risk tolerance?

Answer: Escalate the decision to the appropriate governance authority

Decisions that exceed project authority or tolerance must be escalated to the governance body with the power to approve or reject the proposed approach.

Which concept describes the maximum loss an organization can absorb without threatening its strategic objectives?

Answer: Risk capacity

Risk capacity is the maximum level of risk an organization can absorb given its financial strength, resources, and strategic goals.

A project governance framework for risk management typically includes:

Answer: Clear roles, escalation paths, decision authority levels, and reporting structures

Effective risk governance defines who owns risks, who can approve responses, how risks are escalated, and how risk information flows through the organization.

When an organization's risk appetite changes during a project, the project manager should:

Answer: Review and update the risk management plan and reassess existing risk responses

A change in organizational risk appetite affects the acceptability of existing risks and the appropriateness of current responses, requiring a reassessment.