Exam CRISC topic 1 question 27 discussion

Because he's mitigating the potential of the even happening by spending the $10,000. If he was to "avoid" the risk, he would be avoiding the potential scenario that would arise and cause the risk. By taking action, it has to be either mitigation or transfer - and it does not outline who the risk was transferred onto - thereby, it must be mitigation.

A risk response strategy that reduces the likelihood and impact of occurrence is termed risk mitigation or reduction, which is one of the four major risk response strategies. Risk Transfer,Acceptance, Avoidance and Mitigation.

Correct. B. Mitigation. David has adopted a risk response of mitigation. Mitigation is a risk response strategy that aims to reduce the probability or impact of a risk event. In this case, David has identified a risk that could potentially cause a delay in the project. To prevent this risk event from occurring, he takes additional actions or steps. By taking these extra steps, David is proactively addressing the risk and implementing measures to reduce the likelihood or impact of the risk event. However, these actions come at an additional cost of $10,000 to the project.

I would choose 'A' rather than 'B' based on the wording of this question. Mitigation by its very definition, does not ensure a risk will not happen. It reduces the likelihood but does not guarantee the risk will not occur. The only way to ensure or guarantee a risk will not occur is to avoid the risk entirely. This does not mean the entire project is avoided, but perhaps additional money was spent for an alternative that enabled the project to proceed while avoiding the original risk.

A. Avoidance: Risk avoidance involves changing the project plan to eliminate the risk or to protect the project objectives from its impact. This typically means altering the way things are done, so the risk is no longer applicable. In this case, David has taken specific actions to ensure that the risk event will not happen, which aligns with the avoidance strategy. The additional cost of $10,000 indicates that he has likely altered or revised aspects of the project plan to completely avoid the risk

Risk Mitigation (B)

The answer is B since he has spent money to ensure the risk event will not happen. Risk avoidance will not be the answer as in risk avoidance you exit from doing the particular activity that gives rise to risk. Sine safeguards are implemented with a cost, ans is mitigation

ENSURE that it WILL NOT happen! That surely cant be mitigation, but avoidance. Its possible to avoid risk in a project by totally avoiding that scenario. Eg. The plan was to buy Material from an overseas supplier for $100000, but due to potential logistical issues you elect to buy from a supplier next door who can deliver instantly but charges $110000 for the exact same materials. That surely would be risk avoidance because it ENSURE that late delivery WILL NOT happen.

my thoughts exactly

Statement said David take action so that risk event will not happen. So why is the answer not risk avoidance?