CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

Question

The project team has identified a project risk that requires a response. The risk is documented in the risk register, and the project team has discussed possible risk responses for the risk event. The event is unlikely to occur for several months, but its probability is high. Which of the following is a valid response to the identified risk event?

A Earned value management
B Risk audit
C Technical performance measurement
D Corrective action

Explanation

Corrective action is an actionable intervention used to address a condition that could prevent the project from meeting its plan or objectives. Earned value management and technical performance measurement measure performance, and a risk audit assesses the effectiveness of risk management; none of those is itself a response action to the identified risk.

Learn more

CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

AstroTutor

Notes

Readiness

QuestionQ136

Community Discussion