Risk Management & Mitigation Flashcards
7 cards from real CPS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk Management & Mitigation flashcards as text
Which of the following best describes 'inherent risk' in process management?
Answer: The gross risk level before any controls or mitigations are in place
Inherent risk is the raw level of risk present in a process or activity before any controls, safeguards, or mitigation actions are applied.
When conducting a Failure Mode and Effects Analysis (FMEA), what does the 'detection' rating measure?
Answer: The ability of current controls to detect the failure before it reaches the customer
In FMEA, the detection rating evaluates how effectively existing controls can identify a failure mode before it escapes the process and affects the customer.
A company implements redundant systems to ensure a backup activates if the primary process fails. This risk strategy is best described as:
Answer: Risk mitigation through redundancy
Adding redundant systems reduces the impact of a failure by providing a backup, which is a form of risk mitigation focused on reducing impact severity.
What is the primary objective of a 'business continuity plan' (BCP) in process risk management?
Answer: To ensure critical processes can continue or recover quickly after a disruptive event
A BCP defines strategies and procedures to maintain or rapidly restore critical business functions when disruptions such as disasters or system failures occur.
Which risk escalation trigger is most appropriate for a process manager to use?
Answer: Escalate only when a risk exceeds predefined thresholds of impact or probability
Effective escalation protocols define clear thresholds so that risks exceeding acceptable limits are raised to higher management for decision-making.
In process risk analysis, 'sensitivity analysis' is used to:
Answer: Determine which variables have the greatest influence on the risk outcome
Sensitivity analysis tests how changes in individual input variables affect the overall risk outcome, helping prioritize which factors to control most tightly.
A risk response plan that includes specific pre-planned actions to be triggered only if a defined risk event occurs is called a:
Answer: Contingency plan
A contingency plan is a set of pre-approved actions that are activated when a risk event materializes, reducing response time and uncertainty.