In the Context of Digital and IT Strategy, Explain How To ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of a risk register in the context of Digital and IT Strategy?

   • ATo replace the need for risk assessment in future initiatives
   • BTo communicate risks to external stakeholders only
   • CTo provide a legal defense in case of regulatory investigations
   • DTo record all identified risks and their analysis results for ongoing management
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A multinational corporation is conducting a risk assessment for a global digital transformation. The risk manager needs to communicate risks to stakeholders in different regions, some of whom require detailed technical information and others who need high-level summaries. What is the best approach?

   • ACreate multiple risk reports tailored to different stakeholder groups
   • BShare the full risk register with all stakeholders
   • CProvide only the risk ratings without explanations
   • DCreate a single comprehensive risk report for all stakeholders
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A hospital is implementing a new electronic health record (EHR) system. The project team has identified risks including data privacy breaches, staff resistance to change, and integration issues with legacy systems. The hospital has a low risk appetite for data breaches but a moderate appetite for operational disruptions. Which risk should be prioritized for immediate response?

   • AData privacy breach risk, because of the low risk appetite and potential legal consequences
   • BStaff resistance risk, because it could delay the entire project
   • CAll risks equally, because they all need to be managed
   • DIntegration issues risk, because it could cause system downtime
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A public sector organization is implementing a new citizen services portal. The risk assessment shows that the risk of service unavailability has a high likelihood and high impact. The organization has a low risk appetite for service disruptions. What should the organization do next?

   • AAvoid the risk by cancelling the portal project
   • BTransfer the risk by purchasing an insurance policy
   • CTreat the risk by implementing redundancy and failover mechanisms
   • DAccept the risk because it is inherent in any digital service
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A university is planning to migrate its student records system to a cloud provider. The project team is brainstorming risks and has identified potential issues such as data privacy compliance, vendor lock-in, and service downtime. Which technique would be most effective to ensure a comprehensive list of risks is captured?

   • AConduct a SWOT analysis to identify strengths, weaknesses, opportunities, and threats
   • BPerform a PESTLE analysis to examine external factors
   • COrganize a risk workshop with stakeholders from IT, legal, and academic departments
   • DUse a probability-impact matrix to prioritize risks
   Reveal Solution Discussion Select an answer first