40 questions · Risk Process Facilitation · All types, answers revealed
Which document is the primary output of the risk identification process?
The risk register is updated throughout the project with information from risk identification.
Why this answer
The risk register is the central document where identified risks are recorded.
Which TWO of the following are benefits of conducting regular risk workshops?
Workshops engage stakeholders in the process.
Why this answer
Regular workshops keep risk awareness high and ensure the register stays relevant.
You are organizing a risk workshop for a multi-disciplinary team. Which tool would be best to identify risks from different perspectives?
The RBS ensures all categories of risk (technical, external, etc.) are explored, promoting diverse perspectives.
Why this answer
Checklist analysis and brainstorming are effective, but a 'Risk Breakdown Structure' (RBS) provides a systematic framework to ensure comprehensive identification.
What is the purpose of a Risk Breakdown Structure (RBS)?
The RBS is a tool for structuring risk identification efforts.
Why this answer
The RBS helps organize and categorize potential sources of risk to ensure thorough identification.
Which TWO of the following are common risk response strategies for negative risks?
A primary negative risk strategy.
Why this answer
Common negative risk strategies include Avoid, Transfer, Mitigate, and Accept.
During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?
Inclusive communication and planning are essential for enterprise-level or cross-departmental risks.
Why this answer
Risks affecting multiple departments must be clearly communicated to all stakeholders, and cross-functional owners should be identified.
You have performed a quantitative analysis and identified a risk that is significantly impacting the schedule. What is the next step to address this?
Developing a response strategy is the standard procedure after identifying a significant risk.
Why this answer
Once a critical risk is identified through quantitative analysis, you must plan a response to mitigate its effect.
Which THREE criteria are used to perform a 'Risk Data Quality Assessment'?
Can we trust the data source?
Why this answer
Data quality is assessed based on understanding, accuracy, and reliability.
A quantitative risk assessment reveals that a risk has a 10% probability of a $1,000,000 impact. What is the Expected Monetary Value (EMV) of this risk?
Correct calculation based on EMV formula.
Why this answer
EMV = Probability * Impact. 0.10 * $1,000,000 = $100,000.
Which THREE factors can lead to an ineffective risk facilitation workshop?
Causes the session to lose focus.
Why this answer
Lack of preparation, poor participation, or unclear objectives are common pitfalls.
Which technique is most appropriate for a quick, qualitative assessment of multiple risks in a time-constrained environment?
This provides a simple, visual, and efficient way to rank risks by severity.
Why this answer
The Probability and Impact Matrix allows for a rapid assessment of multiple items based on established scales.
Which facilitation technique involves presenting an anonymous survey to experts to reach a consensus on risk impacts?
This is the definition of the Delphi technique.
Why this answer
The Delphi technique is specifically designed for anonymous expert consensus.
You are facilitating a risk analysis session for a project with high technical uncertainty. Quantitative analysis results show a wide range of variance. What is the most appropriate action to improve the accuracy of the risk model?
Tornado diagrams help identify which variables most influence the outcome, allowing for targeted refinement of those specific estimates.
Why this answer
Updating the risk model with more precise expert estimates or empirical data is the best way to tighten the variance in quantitative models.
In a project, you are facilitating a risk workshop. You discover that a risk has been mitigated, but the residual risk remains high. What is the next logical step?
The risk register must reflect the current state, including the level of residual risk.
Why this answer
If the residual risk is still above the threshold, further mitigation or acceptance is required.
During a risk workshop, stakeholders disagree on the impact of a technical risk. Which tool is most effective for resolving this conflict?
Using a pre-agreed matrix forces stakeholders to map their subjective opinions to objective scale definitions.
Why this answer
The Probability and Impact Matrix provides a standardized scale that guides objective consensus on severity.
You are managing a software development project. Your team has identified a potential integration risk. What is the most effective way to communicate this to the stakeholders?
The Risk Report is the formal, periodic document used to keep stakeholders informed of major risks.
Why this answer
The risk register is the primary tool, but the 'Risk Report' provides a consolidated view of high-level risks for stakeholders.
You are facilitating a risk identification session where one senior stakeholder dominates the conversation. Which facilitation approach would best mitigate this bias?
The Delphi technique uses anonymous surveys to gather input, removing the influence of dominant personalities.
Why this answer
The Delphi Technique or anonymous brainstorming methods help prevent groupthink and domination by a single voice.
Which of the following is the best definition of 'Residual Risk'?
This is the definition of residual risk.
Why this answer
Residual risk is the risk that remains after mitigation measures have been implemented.
Who is primarily responsible for maintaining the risk register throughout the project?
The PM has the overarching responsibility for risk management processes.
Why this answer
The Project Manager is responsible for ensuring that the risk register is kept current.
Which TWO of the following should be included in a risk report to executive management?
Executives focus on the most impactful risks.
Why this answer
Executives need the 'big picture' view, including major risks and the status of contingency.
A project manager is conducting a risk review. During the meeting, a new risk is identified. What should be done immediately?
Once a risk is identified, it must be analyzed to determine if it requires a response.
Why this answer
New risks must be captured in the risk register and evaluated for impact and probability.
If a qualitative risk analysis is showing inconsistent results, what should you review first?
Clear definitions are required to ensure consistency in assessment.
Why this answer
Inconsistent results often stem from poorly defined risk definitions or subjective interpretations of the probability and impact scales.
A project manager is updating the risk register. Which of the following is the most important element to include for a newly identified risk?
Clear identification is the primary requirement for any entry in the risk register.
Why this answer
A clear description and the potential impact are essential to communicate the nature and significance of the risk.
Which THREE techniques are suitable for facilitating risk identification with a remote team?
Asynchronous and effective for remote teams.
Why this answer
Tools that support digital collaboration are best for remote teams.
During a risk workshop, stakeholders are struggling to differentiate between root causes and symptoms. Which facilitation technique should you employ to ensure the risk register accurately reflects the true origin of risks?
This iterative questioning technique is specifically designed to explore cause-and-effect relationships.
Why this answer
The Five Whys technique is a standard facilitation tool for drilling down into root causes during workshops to avoid documenting mere symptoms.
What is the primary role of a 'Risk Owner'?
This is the core duty of a risk owner.
Why this answer
A risk owner is responsible for monitoring the risk and implementing the agreed-upon response.
Which TWO of the following techniques are commonly used for identifying risks during project initiation?
Allows for deep dives with subject matter experts.
Why this answer
Brainstorming and interviewing are standard techniques for gathering initial information.
You are managing a global project and need to perform a quantitative risk analysis. The data provided by local offices varies significantly in quality. What is your first step?
This assesses the extent to which the data is accurate, reliable, and understood before proceeding to complex modeling.
Why this answer
Before performing quantitative analysis, one must ensure the data is reliable to avoid 'garbage in, garbage out'.
A project manager wants to maintain the risk register. Which field is strictly required to prioritize risks during the qualitative analysis phase?
These are the fundamental inputs for the qualitative risk assessment matrix.
Why this answer
Risk scores are typically calculated by multiplying probability and impact, which are essential for prioritization.
You are managing a high-risk project and the quantitative model shows a high probability of missing a milestone. What is the most proactive action to take?
Proactive mitigation is the standard approach to reduce the impact of high-probability risks.
Why this answer
You should investigate the drivers of the risk and develop a plan to address those specific drivers, potentially using contingency or schedule crashing.
Which of the following is NOT a common risk identification technique?
This is a separate process, not a technique for identifying risks.
Why this answer
Risk response planning is a process step, not an identification technique.
Which THREE factors should be considered when assessing the impact of a risk?
A primary impact factor.
Why this answer
Impact can be measured across cost, schedule, and technical/quality performance.
In a quantitative risk analysis, the cost contingency has been depleted, yet the risk remains. What is the next logical step in the risk process?
Once authorized contingency is depleted, the risk exceeds the project manager's authority level.
Why this answer
When contingency is exhausted, the risk must be re-evaluated and potentially escalated to management or the project board.
Which THREE elements are necessary for a high-quality quantitative risk analysis?
Essential for valid model results.
Why this answer
Reliable data, appropriate models, and expert input are the cornerstones of quantitative analysis.
Which TWO of the following are essential components of a well-maintained risk register?
Essential for accountability and action.
Why this answer
A risk register must have at least a clear description and an identified owner to be actionable.
You have multiple risks that appear to be related. What tool would help you visualize the relationships between them?
Also known as a fishbone diagram, it is excellent for showing how factors relate to a problem.
Why this answer
An Interrelationship Digraph or a Cause-and-Effect diagram helps visualize complex relationships between factors.
Which THREE steps are part of the 'Qualitative Risk Analysis' process?
Helps in understanding risk context.
Why this answer
This process involves evaluating probability/impact, ranking, and categorizing.
When facilitating a risk workshop, how do you handle a suggestion that is clearly out of scope for the current project?
The 'Parking Lot' is a standard facilitation tool for off-topic but important ideas.
Why this answer
Address the suggestion respectfully and document it as a potential item for future consideration or outside the project's current bounds.
Which TWO of the following are considered 'Risk Triggers'?
A warning sign of quality failure.
Why this answer
Triggers are early warning signs that a risk is about to occur.
Which TWO documents are essential to have on hand during a risk facilitation workshop?
Defines the rules for the workshop.
Why this answer
The risk register (current state) and the risk management plan (the process) are essential.
Ready to test yourself?
Try a timed practice session using only Risk Process Facilitation questions.