Know How to Explain the Concept of Risk Posture and Show How to Determine an Acceptable Balance Between Opportunity and Risk (11.10, 11.11, 11.12 Including Subsections for All) ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A global bank operates in multiple countries with varying data protection laws. The bank's risk appetite is to 'maintain a strong reputation and comply with all regulations.' However, a new AI-driven customer service tool is being developed that could significantly improve customer satisfaction. The tool requires processing customer data in a way that is compliant in some countries but not in others. What should the bank do?

   • ADeploy the tool globally and address compliance issues after launch.
   • BChange the risk appetite to accept non-compliance in some countries to enable the project.
   • CDeploy the tool only in countries where it is compliant and defer deployment in others.
   • DCancel the project because it cannot be deployed uniformly across all countries.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A pharmaceutical company is developing a new digital health platform. The company's risk appetite is high for research and development but very low for patient data privacy. The platform will collect sensitive health data. The development team wants to launch a minimum viable product (MVP) quickly to gather user feedback. The privacy officer insists on a full privacy impact assessment before any launch. How should the company reconcile these conflicting positions?

   • ALaunch the MVP immediately because the company's high risk appetite for innovation applies.
   • BConduct a focused privacy assessment on the MVP's data flows and implement mitigations, then launch with a clear plan for a full assessment before scaling.
   • CDelay the MVP until the full privacy impact assessment is complete, regardless of the delay.
   • DAsk the privacy officer to accept the risk because the development team is confident the platform is secure.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How do risk appetite and risk tolerance influence strategic decisions in an organization?

   • AThey define the boundaries within which the organization is willing to pursue opportunities
   • BThey determine the exact amount of risk that must be taken in every project
   • CThey are only used in financial risk management, not in IT strategy
   • DThey eliminate the need for risk assessments in strategic planning
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a way an organization can adjust its risk posture?

   • AChanging its governance structure
   • BDeleting the risk appetite statement
   • CIgnoring external market conditions
   • DEliminating all risk management processes
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a method for assessing an organization's current risk posture?

   • AImplementing a new risk management software
   • BIgnoring stakeholder feedback
   • CDeleting all risk registers
   • DConducting a risk culture survey
   Reveal Solution Discussion Select an answer first