PECB ISO 31000 Lead Risk Manager - ISO-31000-Lead-Risk-Manager 模擬練習
An organization ensures that risk management is embedded into its governance structures, aligning accountability and oversight roles with its strategic objectives and culture. Which component of the risk management framework is being applied?
正解: A
解説: (PassTest メンバーにのみ表示されます)
What key factors should be taken into account when making decisions between multiple options involving risk?
正解: C
解説: (PassTest メンバーにのみ表示されます)
Which activity is conducted in Phase I of the OCTAVE framework?
正解: A
解説: (PassTest メンバーにのみ表示されます)
A risk manager wants to improve organizational resilience by embedding climate-related considerations into performance measures, while also fostering open communication about risks across all levels of the organization. Which of the following practices are they considering?
正解: A
解説: (PassTest メンバーにのみ表示されます)
Scenario 7:
Maxime, a chocolate manufacturer headquartered in Ghent, Belgium, produces toffees, eclairs, enrobed chocolates, and caramels. In 2023, a contamination incident in its caramel line triggered a large-scale product recall across Europe, exposing weaknesses in supplier evaluation, reporting channels, and crisis communication. Recognizing the financial, operational, and reputational impact of this event, top management decided to apply a risk management process in line with ISO 31000. The aim was to strengthen resilience, embed risk awareness across departments, and ensure risks are systematically managed in both daily operations and long-term strategies.
To ensure that the risk management process is effective, Maxime set up a structured monitoring and review process with clear procedures for collecting and analyzing data on key risks like supplier reliability, food safety, and communication. For validation of measurement methods, Sophie, the head of Quality Assurance, was tasked with assessing whether the tools used were suitable for evaluating the effectiveness of the process.
Additionally, Maxime introduced a set of measures designed to provide early warning indicators across critical areas. In operations, they tracked the number of production line stoppages and the percentage of defective batches. On the financial side, they monitored fluctuations in raw material prices, especially cocoa, and their impact on margins. For regulatory matters, they followed the frequency of nonconformities identified during inspections. In terms of technology, system downtime in automated packaging lines was measured.
To ensure these indicators were communicated effectively, Sophie worked with top management to present the results in a format that made changes easy to spot and understand. Rather than relying only on static reports, they chose a more dynamic approach that displayed key values visually, highlighted deviations, and issued alerts when thresholds were crossed.
In addition, Maxime established clear communication and consultation processes to ensure that relevant stakeholders were properly engaged. The top management used an approach that clarified who was responsible for carrying out tasks, who held final accountability, who should be consulted for expertise, and who needed to stay informed. To strengthen engagement, Maxime organized how risk information would be delivered to different audiences. Employees received updates during team briefings and through the company's internal platform, while external parties, such as suppliers and regulators, were informed through formal reports and direct correspondence. This approach ensured that each group had access to the information most relevant to them in a timely way.
Based on the scenario above, answer the following question:
According to Scenario 7, what reporting method did the top management and Sophie decide to use to communicate warning signals effectively?
Maxime, a chocolate manufacturer headquartered in Ghent, Belgium, produces toffees, eclairs, enrobed chocolates, and caramels. In 2023, a contamination incident in its caramel line triggered a large-scale product recall across Europe, exposing weaknesses in supplier evaluation, reporting channels, and crisis communication. Recognizing the financial, operational, and reputational impact of this event, top management decided to apply a risk management process in line with ISO 31000. The aim was to strengthen resilience, embed risk awareness across departments, and ensure risks are systematically managed in both daily operations and long-term strategies.
To ensure that the risk management process is effective, Maxime set up a structured monitoring and review process with clear procedures for collecting and analyzing data on key risks like supplier reliability, food safety, and communication. For validation of measurement methods, Sophie, the head of Quality Assurance, was tasked with assessing whether the tools used were suitable for evaluating the effectiveness of the process.
Additionally, Maxime introduced a set of measures designed to provide early warning indicators across critical areas. In operations, they tracked the number of production line stoppages and the percentage of defective batches. On the financial side, they monitored fluctuations in raw material prices, especially cocoa, and their impact on margins. For regulatory matters, they followed the frequency of nonconformities identified during inspections. In terms of technology, system downtime in automated packaging lines was measured.
To ensure these indicators were communicated effectively, Sophie worked with top management to present the results in a format that made changes easy to spot and understand. Rather than relying only on static reports, they chose a more dynamic approach that displayed key values visually, highlighted deviations, and issued alerts when thresholds were crossed.
In addition, Maxime established clear communication and consultation processes to ensure that relevant stakeholders were properly engaged. The top management used an approach that clarified who was responsible for carrying out tasks, who held final accountability, who should be consulted for expertise, and who needed to stay informed. To strengthen engagement, Maxime organized how risk information would be delivered to different audiences. Employees received updates during team briefings and through the company's internal platform, while external parties, such as suppliers and regulators, were informed through formal reports and direct correspondence. This approach ensured that each group had access to the information most relevant to them in a timely way.
Based on the scenario above, answer the following question:
According to Scenario 7, what reporting method did the top management and Sophie decide to use to communicate warning signals effectively?
正解: C
解説: (PassTest メンバーにのみ表示されます)
Scenario 4:
Headquartered in Barcelona, Spain, Solenco Energy is a renewable energy provider that operates several solar and wind farms across southern Europe. After experiencing periodic equipment failures and supplier delays that affected energy output, the company initiated a risk assessment in line with ISO 31000 to ensure organizational resilience, minimize disruptions, and support long-term performance.
A cross-functional risk team was assembled, including representatives from engineering, finance, operations, and logistics. The team began a structured and systematic review of the energy production process to identify potential deviations from intended operating conditions and assess their possible causes and consequences. Using guided discussions with prompts such as "too high," "too low," or "other than expected," they explored how variations in system behavior could lead to operational disruptions or safety risks.
One risk identified was the failure of the main power inverter system at one of the company's key solar facilities-a single point of failure with high production dependence. To better understand this risk, the team used a structured visual technique that mapped the causes leading up to the inverter failure on one side and the potential consequences on the other. It also illustrated the controls that could prevent or mitigate both sides.
During discussions, several team members were inclined to focus on positive evidence supporting the belief that the inverter was reliable, while giving less consideration to contradictory data from maintenance reports. Differing viewpoints were not immediately discussed, as many participants felt more confident agreeing with the general group view that the likelihood of failure was low. It was only after a detailed review of supplier reports that the team revisited their assumptions and adjusted the analysis accordingly.
Based on the scenario above, answer the following question:
According to Scenario 4, during the team's risk discussions at Solenco, most members agreed with the general group opinion and were less willing to consider contradictory maintenance dat a. Which type of risk analysis bias is most likely affecting the team?
Headquartered in Barcelona, Spain, Solenco Energy is a renewable energy provider that operates several solar and wind farms across southern Europe. After experiencing periodic equipment failures and supplier delays that affected energy output, the company initiated a risk assessment in line with ISO 31000 to ensure organizational resilience, minimize disruptions, and support long-term performance.
A cross-functional risk team was assembled, including representatives from engineering, finance, operations, and logistics. The team began a structured and systematic review of the energy production process to identify potential deviations from intended operating conditions and assess their possible causes and consequences. Using guided discussions with prompts such as "too high," "too low," or "other than expected," they explored how variations in system behavior could lead to operational disruptions or safety risks.
One risk identified was the failure of the main power inverter system at one of the company's key solar facilities-a single point of failure with high production dependence. To better understand this risk, the team used a structured visual technique that mapped the causes leading up to the inverter failure on one side and the potential consequences on the other. It also illustrated the controls that could prevent or mitigate both sides.
During discussions, several team members were inclined to focus on positive evidence supporting the belief that the inverter was reliable, while giving less consideration to contradictory data from maintenance reports. Differing viewpoints were not immediately discussed, as many participants felt more confident agreeing with the general group view that the likelihood of failure was low. It was only after a detailed review of supplier reports that the team revisited their assumptions and adjusted the analysis accordingly.
Based on the scenario above, answer the following question:
According to Scenario 4, during the team's risk discussions at Solenco, most members agreed with the general group opinion and were less willing to consider contradictory maintenance dat a. Which type of risk analysis bias is most likely affecting the team?
正解: D
解説: (PassTest メンバーにのみ表示されます)
According to ISO 31000, what is the purpose of risk management?
正解: C
解説: (PassTest メンバーにのみ表示されます)
What is an example of a risk management objective at an operational level?
正解: B
解説: (PassTest メンバーにのみ表示されます)
Scenario 1:
Gospeed Ltd. is a trucking and logistics company headquartered in Birmingham, UK, specializing in domestic and EU road haulage. Operating a fleet of 25 trucks for both heavy loads and express deliveries, it provides transport services for packaged goods, textiles, iron, and steel. Recently, the company has faced challenges, including stricter EU regulations, customs delays, driver shortages, and supply chain disruptions. Most critically, limited and unreliable information has created uncertainty in anticipating delays, equipment failures, or regulatory changes, complicating decision-making.
To address these issues and strengthen resilience, Gospeed's top management decided to implement a risk management framework and apply a risk management process aligned with ISO 31000 guidelines. Considering the importance of stakeholders' perspectives when initiating the implementation of the risk management framework, top management brought together all relevant stakeholders to evaluate potential risks and ensure alignment of risk management efforts with the company's strategic objectives. The top management outlined the general level and types of risks it was prepared to take to pursue opportunities, while also clarifying which risks would not be acceptable under any circumstances. They accepted moderate financial risks, such as fuel price fluctuations or minor delays, but ruled out compromising safety or breaching regulations.
As part of the risk management process, the company moved from setting its overall direction to a closer examination of potential exposures, ensuring that identified risks were systematically analyzed, evaluated, and treated. Top management examined the main operational factors that significantly influence the likelihood and impact of risks. This analysis highlighted concerns related to supply chain disruptions, technological failures, and human errors.
Additionally, Gospeed's top management identified several external risks beyond their control, including interest rate changes, currency fluctuations, inflation trends, and new regulatory requirements. Consequently, top management agreed to adopt practical strategies to protect the company's financial stability and operations, including hedging against interest rate fluctuations, monitoring inflation trends, and ensuring compliance through staff training sessions.
However, other challenges emerged when top management pushed forward with a new contract for international deliveries without fully considering risk implications at the planning stage. Operational staff raised concerns about unreliable customs data and potential delays, but their input was overlooked in the rush to secure the deal. This resulted in delivery setbacks and financial penalties, revealing weaknesses in how risks were incorporated into day-to-day decision-making.
Based on the scenario above, answer the following question:
According to Scenario 1, what did Gospeed's top management define when they examined the main operational factors that have a major influence on the likelihood and impact of risks?
Gospeed Ltd. is a trucking and logistics company headquartered in Birmingham, UK, specializing in domestic and EU road haulage. Operating a fleet of 25 trucks for both heavy loads and express deliveries, it provides transport services for packaged goods, textiles, iron, and steel. Recently, the company has faced challenges, including stricter EU regulations, customs delays, driver shortages, and supply chain disruptions. Most critically, limited and unreliable information has created uncertainty in anticipating delays, equipment failures, or regulatory changes, complicating decision-making.
To address these issues and strengthen resilience, Gospeed's top management decided to implement a risk management framework and apply a risk management process aligned with ISO 31000 guidelines. Considering the importance of stakeholders' perspectives when initiating the implementation of the risk management framework, top management brought together all relevant stakeholders to evaluate potential risks and ensure alignment of risk management efforts with the company's strategic objectives. The top management outlined the general level and types of risks it was prepared to take to pursue opportunities, while also clarifying which risks would not be acceptable under any circumstances. They accepted moderate financial risks, such as fuel price fluctuations or minor delays, but ruled out compromising safety or breaching regulations.
As part of the risk management process, the company moved from setting its overall direction to a closer examination of potential exposures, ensuring that identified risks were systematically analyzed, evaluated, and treated. Top management examined the main operational factors that significantly influence the likelihood and impact of risks. This analysis highlighted concerns related to supply chain disruptions, technological failures, and human errors.
Additionally, Gospeed's top management identified several external risks beyond their control, including interest rate changes, currency fluctuations, inflation trends, and new regulatory requirements. Consequently, top management agreed to adopt practical strategies to protect the company's financial stability and operations, including hedging against interest rate fluctuations, monitoring inflation trends, and ensuring compliance through staff training sessions.
However, other challenges emerged when top management pushed forward with a new contract for international deliveries without fully considering risk implications at the planning stage. Operational staff raised concerns about unreliable customs data and potential delays, but their input was overlooked in the rush to secure the deal. This resulted in delivery setbacks and financial penalties, revealing weaknesses in how risks were incorporated into day-to-day decision-making.
Based on the scenario above, answer the following question:
According to Scenario 1, what did Gospeed's top management define when they examined the main operational factors that have a major influence on the likelihood and impact of risks?
正解: C
解説: (PassTest メンバーにのみ表示されます)