Certified in Risk and Information Systems Control (CRISC) — Question 1254

Billy is the project manager of the HAR Project and is in month six of the project. The project is scheduled to last for 18 months.
Management asks Billy how often the project team is participating in risk reassessment in this project. What should Billy tell management if he's following the best practices for risk management?

Answer options

• A. Project risk management has been concluded with the project planning.
• B. Project risk management happens at every milestone.
• C. Project risk management is scheduled for every month in the 18-month project.
• D. At every status meeting the project team project risk management is an agenda item.

Correct answer: D

Explanation

The correct answer is D because incorporating risk management into every status meeting ensures continuous monitoring and reassessment of risks throughout the project. Option A is incorrect as risk management should not conclude at planning; option B is too infrequent, and option C suggests a monthly schedule, which may not be necessary if risks are reviewed regularly in meetings.