You are the portfolio manager for a technology modernization portfolio. The portfolio board has set a risk tolerance threshold of $2 million for aggregate exposure. During a quarterly review, you discover that the combined potential impact of three high-probability risks across different projects totals $2.4 million, even though each individual risk is within its project's tolerance. What is the most appropriate action to take?
You are managing a portfolio of IT projects. A new risk has been identified: a critical shared resource (a senior architect) is planned to work on three major projects simultaneously, creating a bottleneck. Which portfolio risk response strategy is most appropriate to address this resource contention?
You are the portfolio manager for a pharmaceutical company. A key supplier of a critical raw material has been consistently late, causing delays in several projects. The supplier is now facing financial difficulties. You have identified this as a high-priority portfolio risk. Which risk response strategy is most appropriate at the portfolio level?
A portfolio manager is analyzing the risk of a new product launch that spans five projects. The risk register shows that a key technology is unproven and could fail, affecting all five projects. Which risk response strategy is being used if the portfolio manager decides to allocate additional funds for a parallel technology track?
You are leading a portfolio risk management workshop to identify risks that could affect the achievement of strategic objectives. Which two techniques are most appropriate for identifying portfolio-level risks that may not be evident at the project level? (Choose two.)
You are the portfolio manager for a construction company. During a portfolio risk review, you identify that several projects are experiencing schedule delays due to a shortage of skilled labor in the region. This is affecting the portfolio's overall timeline and budget. Which two actions should you take to address this portfolio-level risk? (Choose two.)
A Portfolio Manager identifies a high probability risk involving resource scarcity across all active projects. What is the most appropriate risk response?
Your portfolio board is concerned about the impact of sudden market volatility on the portfolio. You decide to perform a quantitative risk analysis. Which tool is most effective for this?
A Portfolio Manager identifies a high-level risk where the cumulative budget of active projects exceeds the total portfolio funding ceiling. Which action best aligns with Portfolio Risk Management best practices?
During a portfolio review, you observe that the actual ROI is consistently lower than predicted due to cumulative risk impacts. What is the most logical next step?
You are the portfolio manager for a financial services firm's digital transformation portfolio. Your portfolio risk management plan specifies a 95% confidence level and a one-year horizon for quantitative risk analysis. The CIO asks why the aggregate portfolio contingency reserve, calculated via Monte Carlo simulation, is significantly larger than the sum of the individual component contingency reserves. What is the most likely explanation for this difference?
You are managing a portfolio of IT infrastructure projects. A new regulatory requirement is expected to increase the cost of compliance for all projects in the portfolio by 10-15% over the next fiscal year. Your portfolio sponsor asks you to update the portfolio risk register and recommend a response strategy. Which action best aligns with portfolio risk management principles?
Your portfolio includes a large infrastructure program and several smaller IT projects. A new regulatory requirement mandates that all projects comply with stricter data privacy controls within six months. You need to prioritize where to apply limited compliance resources. Which portfolio risk management action should you take FIRST?
You are managing a portfolio of infrastructure projects. A new regulatory requirement is expected to increase costs for all projects using a specific technology. This risk has a high probability and high impact, but it is not yet reflected in any project risk register. As the portfolio manager, what should you do first?
During a quarterly portfolio risk review, you notice that two strategic initiatives have risks that are individually rated as low, but when combined, they could cause a critical shared supplier to fail. This situation is an example of:
You are conducting a portfolio risk review with your team. The portfolio board has asked you to identify inputs that are essential for effective portfolio risk management. Which two of the following are considered key inputs to the portfolio risk management process? (Choose two.)
You are the portfolio manager for a pharmaceutical R&D portfolio. A new regulatory guideline is expected to significantly increase the cost and timeline for all clinical trials in the portfolio. You need to assess the overall impact on the portfolio's strategic objectives. Which action should you take first?
Your organization's portfolio includes a large infrastructure program that is 70% complete. A new regulatory requirement is announced that will mandate significant design changes across all remaining deliverables. The program manager reports that the changes can be absorbed within the existing schedule float but will increase costs by 12%. As the portfolio manager, what is the most appropriate first action?
A portfolio manager is reviewing the risk management approach for a portfolio of strategic initiatives. The organization's leadership wants to ensure that portfolio risks are managed consistently and aligned with strategic objectives. Which document should the portfolio manager primarily reference to understand the risk management framework, including roles, responsibilities, and risk tolerances?
You are the portfolio manager for a financial services firm. A new regulatory requirement mandates that all customer data be stored within the country. Your portfolio includes a project upgrading the CRM system, which currently stores data in a foreign cloud region. The project manager reports that the compliance risk is not in the project risk register because it is considered a portfolio-level concern. What should you do first to ensure this risk is managed appropriately?
You are managing a portfolio with a mix of projects and programs. A new risk has been identified that could affect multiple components simultaneously, but its probability and impact are uncertain. The portfolio board wants to understand the potential worst-case scenario and the likelihood of exceeding the portfolio's risk tolerance. Which technique is most appropriate to use?
You are managing a portfolio of IT projects for a healthcare organization. During a portfolio risk review, you identify that three projects rely on the same external vendor for a critical software component. The vendor has recently been acquired by a competitor, and there is a risk that support and licensing terms may change unfavorably. Which action best addresses this portfolio-level risk?
You are the portfolio manager for a pharmaceutical company. Your portfolio includes projects developing new drugs. A new regulatory guideline is expected to be released in six months, which may require additional clinical trials for one of the drugs. The project manager for that drug development project has not included this in the project risk register because the guideline is not yet final. How should you handle this in the portfolio risk management process?
You are reviewing the portfolio risk register and notice that a risk related to a key supplier's financial stability has been marked as 'accepted.' Under what circumstances is accepting this risk most appropriate?
You are leading a portfolio risk workshop with project managers. One project manager suggests that since their project is ahead of schedule, they can ignore a medium-probability risk because it won't affect their timeline. How should you respond as the portfolio manager?
You are leading a portfolio risk management workshop. Which TWO of the following are key inputs to the portfolio risk management process? (Choose two.)
During a portfolio review, you note that several projects are reporting risks that, if materialized, would impact shared resources and strategic initiatives. You need to ensure these risks are managed cohesively. Which portfolio document should you update to reflect the consolidated view of these risks?
You are the portfolio manager for a retail company. The portfolio includes a project to implement a new e-commerce platform. A risk has been identified that a key supplier of payment processing services may increase fees by 20% next year. This risk is currently listed in the project risk register. During a portfolio risk review, you determine that this risk could also affect two other projects that use the same supplier. What should you do?
Your portfolio has a risk tolerance that allows for moderate risk-taking to achieve strategic goals. A new project is proposed that has a high potential return but also a high probability of failure. The project's risk exposure exceeds the portfolio's risk tolerance. As the portfolio manager, what should you do first?
You are the portfolio manager for a pharmaceutical R&D portfolio with three drug-development programs. A key contract manufacturer shared audited financials showing a debt covenant breach that will likely trigger restructuring within two quarters, which could halt supply of a critical excipient used by two programs. The programs' risk registers list this supplier only as 'medium likelihood, medium impact.' What should you do FIRST as the portfolio manager?
During a quarterly portfolio risk review, you plot each component's risk exposure against its contribution to strategic objectives. One program shows low individual risk exposure but underpins three of the five strategic objectives, while two larger programs with high individual exposure contribute to only one objective each. The portfolio board asks how to prioritize risk response funding. Which portfolio risk management concept should drive your recommendation?
You are the portfolio manager for a global retail portfolio spanning e-commerce, supply chain, and store operations programs. The portfolio board has approved a risk appetite statement and now wants assurance that portfolio risk responses remain aligned with it as conditions change. Which two actions should you take to maintain that alignment? (Choose two.)
A portfolio board member asks you to explain how portfolio risk management differs from the risk management performed by the individual program managers in your portfolio. Which statement best describes the portfolio manager's distinctive risk responsibility?