CRISC Practice Test practice questions, page 31 of 76, with answer review and explanations.
Question 151
Which of the following is true for risk evaluation?
Risk evaluation is done only when there is significant change.
Risk evaluation is done once a year for every business processes.
Risk evaluation is done annually or when there is significant change.
Risk evaluation is done every four to six months for critical business processes.
Question 152
You work as a project manager for Bluewell Inc. You have identified a project risk. You have then implemented the risk action plan and it turn out to be non- effective. What type of plan you should implement in such case?
Risk mitigation
Risk fallback plan
Risk avoidance
Risk response plan
Question 153
You are completing the qualitative risk analysis process with your project team and are relying on the risk management plan to help you determine the budget, schedule for risk management, and risk categories. You discover that the risk categories have not been created. When the risk categories should have been created?
Define scope process
Risk identification process
Plan risk management process
Create work breakdown structure process
Question 154
You work as a project manager for BlueWell Inc. You have declined a proposed change request because of the risk associated with the proposed change request. Where should the declined change request be documented and stored?
Change request log
Project archives
Lessons learned
Project document updates
Question 155
Capability maturity models are the models that are used by the enterprise to rate itself in terms of the least mature level to the most mature level. Which of the following capability maturity levels shows that the enterprise does not recognize the need to consider the risk management or the business impact from IT risk?