Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The idea of sharing might be appropriate if a third party were brought in to manage the risk (e.g., sharing the potential savings with the vendor in exchange for their expertise), but since the vendor is helping you realize the opportunity directly, exploiting remains the most suitable answer is C
The correct answer is: C. This risk event is an opportunity to the project and should be exploited. Exploiting a positive risk involves taking actions to ensure the opportunity is realized. In this case, hiring a vendor to help establish proper project management techniques can be seen as an effort to exploit the opportunity by increasing the chances of realizing the $670,000 savings.
D. This is a risk event that should be shared to take full advantage of the potential savings. Reasoning: Sharing a risk involves partnering with another party (e.g., a vendor or another organization) who can help manage the risk to achieve the desired outcome. While sharing might be a viable strategy in some cases, the most direct and proactive approach to ensure the opportunity is realized is to exploit it. Sharing might complicate the process and reduce the direct control over achieving the savings.