Project Risk Management Professional Standards & Competencies 5 — Questions and Answers
Question 1: A risk manager is new to an organization and finds that the existing risk management processes do not align with ISO 31000 or PMBOK standards. What is the most professionally appropriate initial action?
- Immediately overhaul all processes without consultation
- Assess current processes, understand the organizational context, and propose improvements collaboratively (Correct answer)
- Follow existing processes without suggesting any changes
- Report the organization to a professional standards body
Correct answer: Assess current processes, understand the organizational context, and propose improvements collaboratively
Effective professional practice requires understanding the current context before proposing changes, and influencing improvement through collaboration rather than unilateral action.
Question 2: Which behavior reflects the 'responsibility' value in PMI's Code of Ethics when a risk manager makes an error in a risk assessment?
- Quietly correct the error without disclosure
- Disclose the error proactively, correct it, and take steps to prevent recurrence (Correct answer)
- Blame the error on insufficient data provided by the team
- Wait to see if the error causes any actual harm before acting
Correct answer: Disclose the error proactively, correct it, and take steps to prevent recurrence
PMI's responsibility value requires practitioners to acknowledge mistakes, correct them openly, and take ownership of improving their processes.
Question 3: Which competency is demonstrated when a risk manager proactively identifies emerging risks before they are raised by stakeholders?
- Reactive risk monitoring
- Proactive risk identification and strategic foresight (Correct answer)
- Passive risk acceptance
- Risk avoidance through project scope reduction
Correct answer: Proactive risk identification and strategic foresight
Professional risk managers demonstrate strategic competency by anticipating and identifying risks early rather than waiting for issues to surface from stakeholders.
Question 4: In a cross-functional project team, a risk manager needs buy-in from department heads who are skeptical of the risk process. What professional competency is MOST needed?
- Advanced quantitative analysis skills
- Influence and negotiation skills to build stakeholder support (Correct answer)
- Authority to mandate participation
- Technical expertise in each department's domain
Correct answer: Influence and negotiation skills to build stakeholder support
Influencing without authority is a critical leadership competency for risk managers who must gain cooperation from stakeholders they do not directly control.
Question 5: According to professional standards, what is the purpose of a risk audit?
- To penalize team members who failed to identify risks
- To evaluate the effectiveness of risk management processes and responses (Correct answer)
- To replace the risk register with a new document
- To close all open risks at project completion
Correct answer: To evaluate the effectiveness of risk management processes and responses
Risk audits assess whether risk management processes are functioning as intended and whether risk responses are effective, supporting continuous improvement.
Question 6: A professional risk manager is working on a highly confidential defense project. A colleague from another company asks for details about the project's risk profile. The risk manager should:
- Share general risk categories since no specifics are revealed
- Decline to share any confidential project information to protect client confidentiality (Correct answer)
- Share the information if the colleague has a PMI certification
- Share only financial risk data since it's publicly reported
Correct answer: Decline to share any confidential project information to protect client confidentiality
PMI's responsibility principle includes protecting confidential information entrusted by clients and organizations, regardless of the requester's credentials.
Question 7: Which statement BEST describes the role of a risk management plan in demonstrating professional competency on a project?
- It serves as a formality that rarely influences actual project decisions
- It provides a structured framework that guides how risks are identified, analyzed, responded to, and monitored throughout the project (Correct answer)
- It is only relevant during the project planning phase
- It replaces the need for a project management plan
Correct answer: It provides a structured framework that guides how risks are identified, analyzed, responded to, and monitored throughout the project
A well-developed risk management plan is the cornerstone of professional risk practice, establishing the methodology, roles, tools, and processes that guide all risk activities.
Project Risk Management Professional Standards & Competencies 5
A risk manager is new to an organization and finds that the existing risk management processes do not align with ISO 31000 or PMBOK standards.
What is the most professionally appropriate initial action?