CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ31

VerifiedSecure Software Lifecycle Management

Bill is the project manager for the JKH Project. He and the project team have identified a project risk event with a high likelihood of occurring and a high cost impact on the project. Bill discusses the risk event with Virginia, the primary project customer, and she decides that the requirements related to the risk event should be removed from the project. Removing the requirements affects the project scope, but can free the project from the high-risk exposure. What risk response has been implemented in this project?

Explanation

Risk avoidance eliminates the threat or protects the project from its impact by removing the requirements that create the risk exposure. The scope change eliminates the source of the high-risk event rather than merely reducing, transferring, or accepting it.

Community Discussion

No comments yet. Be the first to start the discussion!