Know How to Explain the Concept of Risk Posture and Show How to Determine an Acceptable Balance Between Opportunity and Risk (11.10, 11.11, 11.12 Including Subsections for All) ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In the context of digital and IT strategy, what does an organization's risk posture represent?

   • AThe total monetary value of all risks currently being carried by the organization
   • BA documented list of all potential threats and vulnerabilities that could impact the organization
   • CThe organization's overall stance toward risk, reflecting its willingness and capacity to take on risk in pursuit of its objectives
   • DThe specific set of risk mitigation controls implemented across all IT systems
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How does risk posture align with business strategy and IT strategy?

   • ARisk posture is defined by IT strategy and then applied to business strategy
   • BRisk posture is independent of business strategy and only affects IT operations
   • CRisk posture is only relevant when the organization is in financial distress
   • DRisk posture ensures that business and IT strategies are consistent with the organization's willingness to take risks
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A utility company is facing pressure to adopt smart meters to improve grid efficiency. The company has a very low risk posture due to the critical nature of its infrastructure. The smart meter project involves significant upfront investment and a long payback period. The regulator is supportive but has not yet defined security standards for smart meters. The company's board is divided: some want to proceed to gain a competitive advantage, while others want to wait for the regulator. What is the most balanced approach?

   • ABegin a pilot project in a limited area while actively engaging with the regulator to help shape the standards.
   • BProceed with the project immediately to gain a first-mover advantage.
   • CAbandon the project because the regulatory uncertainty is too high.
   • DWait for the regulator to define standards before starting any work.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A traditional manufacturing company has a very risk-averse posture. The new CEO wants to shift to a more balanced posture to enable digital transformation. The company's culture is deeply rooted in caution, and the workforce is resistant to change. The CEO has limited budget for this transformation. What is the most effective first step to adjust the risk posture?

   • AInvest heavily in new technology to demonstrate the benefits of innovation.
   • BStart with a small, low-risk pilot project that can demonstrate success and build confidence.
   • CHire external consultants to implement a new risk management framework.
   • DMandate that all employees take more risks and penalize those who do not.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is an external factor that can influence an organization's risk posture?

   • ALeadership attitude toward risk
   • BMarket conditions
   • COrganizational culture
   • DRisk management capabilities
   Reveal Solution Discussion Select an answer first