Information Systems Risk Management Chapter 5

FresherStatueOfLiberty avatar
FresherStatueOfLiberty
·
·
Download

Start Quiz

Study Flashcards

26 Questions

What is the purpose of the Identify process in risk management?

To identify and characterize threats

What is the main goal of risk management in project management?

To minimize the probability and impact of negative risks while maximizing the probability and impact of positive risks

What is the Project Risk Management Knowledge Area composed of?

Seven processes

What is individual project risk defined as?

An uncertain event or condition that, if it occurs, has a positive or negative effect on a project's objectives

What is overall project risk defined as?

The effect of uncertainty on the project as a whole

Which of the following is an emerging trend in Project Risk Management?

Non-event risks

Which process group does the Implement Risk Responses process belong to?

Executing

What is the purpose of the Analyze process in risk management?

To convert risk data into risk decision-making information

What is a consideration for tailoring the Project Risk Management process?

Project complexity

Why is risk increased in high-variability environments?

Due to increased uncertainty

What is the primary focus of the Project Risk Management Knowledge Area?

To manage both individual project risk and overall project risk

What is a characteristic of projects managed using adaptive approaches?

Frequent reviews of incremental work products

What is the purpose of the Track process in risk management?

To monitor the status of risks and the actions taken to enhance them

What is the purpose of the Plan Risk Management process?

To define the way to conduct risk management activities

Why is project size a consideration for tailoring the Project Risk Management process?

Because larger projects require more detailed risk approaches

What is a consideration for tailoring the Project Risk Management process in agile projects?

The need for frequent risk reviews

What is expert judgment in the context of risk management?

Judgment based on specific knowledge area or product area

What is the purpose of data analysis in risk management?

To determine the risk appetite of project stakeholders

What is the output of the Plan Risk Management process?

Risk management plan

What does the risk management plan include?

Methodology, roles and responsibilities, risk strategy, funding, timing, risk categories, stakeholder risk appetite, and other elements

What is the purpose of a probability and impact matrix?

To prioritize risks based on their probability and impact scores

What is included in the risk management plan to provide a means for grouping individual project risks?

Risk categories

What is the purpose of tracking in the risk management plan?

To document the history of risk activities

What is stakeholder risk appetite recorded in the risk management plan?

To inform the details of the Plan Risk Management process

What is the purpose of meetings in risk management?

To hold the project kick-off meeting or a specific planning meeting

What does the risk management plan describe?

How risk management activities will be structured, monitored, and controlled

Study Notes

Risk Management Process

  • Identifies and characterizes threats
  • Analyzes risk data into decision-making information
  • Plans actions for addressing individual risks and creates an integrated risk management plan
  • Tracks the status of risks and actions taken to enhance them
  • Controls deviations from planned risk actions
  • Communicates information and views about risks

Project Risk Management

  • Concerned with identifying, analyzing, and planning for potential risks that might impact the project
  • Minimizes the probability and impact of negative risks while maximizing the probability and impact of positive risks
  • Comprises seven processes: Plan Risk Management, Identify Risks, Perform Qualitative Risk Analysis, Perform Quantitative Risk Analysis, Plan Risk Responses, Implement Risk Responses, and Monitor Risks

Project Risk Management Knowledge Area

  • Addresses two levels of risk: individual project risk and overall project risk
  • Individual project risk: an uncertain event or condition that has a positive or negative effect on a project's objectives
  • Overall project risk: the effect of uncertainty on the project as a whole, combining all risks and sources of uncertainty
  • Non-event risks: variability risk, ambiguity risk
  • Project resilience
  • Integrated risk management

Project Risk Management Considerations

  • Project size: budget, duration, scope, or team size
  • Project complexity: innovation, new technology, commercial arrangements, interfaces, or external dependencies
  • Project importance: breakthrough opportunities, significant blocks to organizational performance, or major product innovation
  • Development approach: waterfall or agile

High-Variability Environments

  • Incur more uncertainty and risk
  • Adaptive approaches: frequent reviews, cross-functional project teams, and knowledge sharing to manage risk

Plan Risk Management

  • Defines the way to conduct risk management activities
  • Outputs: risk management plan that describes how risk management activities will be structured and performed

Risk Management Plan

  • Methodology: approaches, tools, and data sources
  • Roles and responsibilities: risk management responsibilities
  • Risk strategy: general approach for managing risk
  • Funding: funds needed for Project Risk Management activities
  • Timing: schedule of risk management processes
  • Risk categories: grouping individual project risks
  • Stakeholder risk appetite: recorded in the risk management plan
  • Definitions of risk probability and impacts: specific to the project context
  • Probability and impact matrix: prioritizes risks
  • Reporting formats: content of the risk register and risk report
  • Tracking: description of how to document risk activities and audit risk management processes

This quiz is about information systems risk management, covering topics such as identifying and analyzing risks, planning and prioritizing risk actions, and tracking and controlling risks.

Make Your Own Quizzes and Flashcards

Convert your notes into interactive study material.

Get started for free

More Quizzes Like This

Use Quizgecko on...
Browser
Browser