プロジェクトにおけるリスクマネジメントに関する記述として, 最も適切なものはどれか。
平成31年度 春期 ITパスポート試験 問37
This question's explanation and your answers so far.
問 37
Incorrectア
Because new risks continue to emerge as the project progresses, it is impossible to identify all risks at the start. Risk identification is a continuous activity carried out repeatedly throughout the entire project, so the claim that all risks must be identified at the start is wrong.
Incorrectイ
Risk response strategies are not limited to avoidance; there are several, such as transfer, mitigation, and acceptance, used selectively according to priority and cost. Risks with a low probability of occurrence or low impact are sometimes deliberately accepted, so the policy of avoiding all risks is unrealistic and wrong.
- ウ
正解 In risk management, each identified risk is evaluated along two axes, the probability of occurrence and the degree of impact when it occurs, and risks are prioritized based on their magnitude (that is, the size of the risk). By planning and allocating response strategies with a focus on higher-priority risks first, limited time, cost, and personnel can be used effectively. Choice ウ states exactly this idea and is the most appropriate.
Incorrectエ
Risk response strategies should be planned in advance, before a risk materializes (proactive response). Planning them one by one only after a risk has occurred puts you on the back foot, and the resulting expanded impact and rework end up increasing costs or losses. Planning them each time a risk occurs is wrong.
- Risk prioritization is evaluated by probability of occurrence multiplied by the degree of impact when it occurs, focusing response efforts on the largest ones first.
- Risk response strategies include avoidance, transfer, mitigation, and acceptance, and the principle is to identify and plan for risks proactively and continuously, not to respond to each one only after it occurs.