Know How to Explain the Concept of Risk Posture and Show How to Determine an Acceptable Balance Between Opportunity and Risk (11.10, 11.11, 11.12 Including Subsections for All) ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A traditional insurance company wants to become more innovative and move from a 'defensive' risk posture to a 'balanced' one. The current culture is very cautious, and every new idea requires multiple layers of approval. The strategy team has been tasked with adjusting the risk posture. Which action would be most effective in shifting the posture?

   • ARedesign the governance process to allow for faster, tiered approvals based on the size of the risk.
   • BCommunicate the new risk appetite statement to all employees and ask them to take more risks.
   • CIncrease the risk capacity by securing a larger budget for innovation projects.
   • DOutsource all innovation projects to a third-party startup to avoid internal risk.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following best describes the process of determining an acceptable balance between opportunity and risk?

   • AA regulatory requirement that mandates a specific level of risk-taking
   • BA one-time decision made by the IT department to minimize all risks
   • CA financial calculation that determines the exact amount of risk to take
   • DA continuous process of evaluating opportunities against the organization's risk appetite and tolerance
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A manufacturing company is assessing its risk posture before adopting IoT sensors on the factory floor. The leadership team is very risk-averse, but the market is becoming more competitive and customers are demanding real-time production data. The company operates in a jurisdiction with strict data privacy laws. Which combination of factors is most likely to shape the organization's risk posture in this scenario?

   • AInternal culture of risk aversion and external regulatory requirements.
   • BExternal market competition and internal IT budget constraints.
   • CThe age of the factory equipment and the skill level of the maintenance staff.
   • DCustomer demand for data and the availability of IoT vendors.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an internal factor that can influence an organization's risk posture?

   • ARegulatory requirements
   • BOrganizational culture
   • CGeopolitical events
   • DMarket conditions
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A new CIO at a logistics company is reviewing the organization's approach to risk. She observes that the company has a detailed risk register, conducts regular risk assessments, and has a strong compliance record. However, she also notes that the company has missed several market opportunities because decisions are made very slowly and only after extensive analysis. How should the CIO characterize the company's risk posture?

   • ARisk-seeking, because the company is willing to wait for the best opportunities.
   • BRisk-neutral, because the company balances risk and opportunity equally.
   • CRisk-aware, because the company has a detailed risk register and conducts assessments.
   • DRisk-averse, because the company's processes prioritize avoiding negative outcomes over seizing opportunities.
   Reveal Solution Discussion Select an answer first