PMI-RMP Exam Dumps - PMI Risk Management Professional (PMI-RMP) Exam

The risk manager is responsible for ensuring that all risks, including secondary risks, are identified and addressed during the risk response planning process. If key secondary risks were missed, the risk manager should be held accountable. (Reference: Project Management Institute. A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, Section 11.5)

The risk manager is responsible for identifying and analyzing risks, as well as planning and implementing risk responses. Secondary risks are those risks that arise as a direct result of implementing a risk response to a specific risk. The risk manager should have considered the potential secondary risks during the risk response planning and updated the risk register accordingly. The project manager should hold the risk manager accountable for missing the secondary risks and ensure that they are properly addressed12

According to the PMBOK Guide, risk prioritization is the process of assigning a level of importance to each identified risk based on its probability and impact, as well as other factors such as urgency, stakeholder tolerance, and project objectives. Risk prioritization helps the project team to focus on the most significant risks and allocate resources accordingly. One of the tools and techniques for risk prioritization is stakeholder engagement, which involves involving the key stakeholders in the risk analysis and decision making process. Stakeholder engagement helps to ensure that the risk prioritization reflects the expectations and preferences of the stakeholders, and that they are aware of and agree with the results. By engaging the key stakeholders during the prioritization process, the risk manager could have avoided the board’s request to sort the risks differently, as the board would have been part of the process and would have accepted the outcome. References: = PMBOK Guide, 6th edition, pages 406-407; The Standard for Risk Management in Portfolios, Programs, and Projects, page 67.

A company manages confidential customer information, and a data breach exposing sensitive information was discovered. What should the risk manager do?

A. Execute the security risks contingency plan.

B. Get a report of customers affected by the risk.

C. Identify residual and secondary risks.

D. Coordinate a response with the risk owner.

Answer: D

According to the PMBOK Guide, the risk owner is the person assigned the responsibility of monitoring the risk and implementing the risk response plan. The risk owner should be involved in the risk response execution and evaluation, and should communicate the results and outcomes to the relevant stakeholders. In the case of a data breach, the risk owner should coordinate a response with the risk manager and other parties involved, such as the security team, the legal team, the customer service team, and the senior management. The risk owner should also report the status of the risk and the effectiveness of the response plan to the risk manager. The risk manager should oversee the risk response process and ensure that the risk is handled appropriately and in alignment with the project objectives and stakeholder expectations. References: = PMBOK Guide, 6th edition, pages 452-453; The Standard for Risk Management in Portfolios, Programs, and Projects, page 79.

 

Scenario analysis is a useful tool for assessing the risk involved in testing by exploring different possible outcomes. In the context of deciding between laboratory testing, simul-ation methods, and field trials, scenario analysis allows the risk manager to evaluate the potential risks and benefits of each testing approach under different scenarios. This method helps in understanding how various uncertainties can impact the testing process and its outcomes, which is critical when selecting the most appropriate testing strategy​.

 

 

 

The project manager should discuss the risk response strategies with the stakeholders to handle their expectations. This will help the project manager to align the risk responses with the stakeholder’s risk appetite, preferences, and expectations. It will also help the project manager to obtain the stakeholder’s support and approval for the risk responses. This is the best way to ensure clear visibility on the project risks and progress. Adding buffers to the schedule to accommodate risk (option A) is not a good practice, as it may create false expectations and hide the true impact of risk. Ensuring the risk register includes all identified risks (option B) is important, but it is not enough to handle stakeholder expectations. The project manager also needs to communicate the risk register to the stakeholders and discuss the risk responses with them. Developing a communication plan to share updates on risks (option D) is also a good practice, but it is not sufficient to handle stakeholder expectations. The project manager also needs to involve the stakeholders in the risk response planning process and obtain their feedback and approval. References: PMI, The Standard for Risk Management in Portfolios, Programs, and Projects, 2019, p. 97; PMI, A Guide to the Project Management Body of Knowledge (PMBOK® Guide), 6th ed., 2017, p. 407.

The project manager should develop a communication plan to share updates on risks (D) to handle stakeholder expectations, especially since the organization has a low risk appetite and stakeholders are very engaged. This approach ensures that stakeholders are regularly informed about the project's risks and progress, addressing their concerns and expectations. This is supported by the PMI's PMBOK Guide, Sixth Edition.

The Delphi technique allows the project risk manager to gather opinions from all stakeholders anonymously. This method would enable stakeholders to express their concerns without feeling uncomfortable in front of the influential stakeholder.

 The Delphi technique is a tool used to make quick decisions with consensus. This technique consists of sending several sets of anonymous questions to each expert. This is followed by a group discussion after every round. The Delphi technique can help the project risk manager to identify risks by soliciting the opinions of all stakeholders without revealing their identities. This way, the stakeholders can express their views freely and honestly, without being influenced or intimidated by the influential stakeholder. The Delphi technique can also reduce personal bias, ego, or emotional conflict among the participants. The project risk manager can use the results of the Delphi technique to create a list of potential risks and their causes, effects, and probabilities. References: 3, 2, 5

An affinity diagram is a tool used to visually organize and group risks or ideas based on their similarities and categories. It helps in structuring the risks for further analysis and discussion. (Reference: PMBOK Guide, 6th Edition, p. 138)

 According to the PMBOK Guide, an affinity diagram is a tool and technique for the identify risks process that allows large numbers of ideas to be sorted into groups for review and analysis. An affinity diagram can help the risk manager to visually organize the risks identified in the pre-workshop survey by grouping them into categories based on their similarities or common characteristics. This can help the risk manager to facilitate the risk analysis and prioritization in the workshop, as well as to stimulate new patterns of thinking and generate additional risks.

Some of the other options are not relevant or appropriate for the question scenario:

The analytical hierarchy process is a technique for the plan risk management process that provides a method for comparing and ranking alternatives based on multiple criteria. It is not a tool for visually organizing risks.

A SWOT analysis is a technique for the identify risks process that examines the project from the perspective of its strengths, weaknesses, opportunities, and threats. It is not a tool for visually organizing risks, but rather for generating them.

Assigning probability and impact is a technique for the perform qualitative risk analysis process that assesses the likelihood and the potential effect of each individual risk on the project objectives. It is not a tool for visually organizing risks, but rather for evaluating them.