ORA 7 Flashcards

1
Q

It is the overall process of risk identification, risk analysis and risk evaluation.

It should be conducted systematically, iteratively and collaboratively, drawing on the knowledge and views of
stakeholders, and should use the best available information

A

Risk Assessment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Involves the recognition of risks and the rating them to determine the significant risks facing the organization,
project or strategy.

A

Risk Assessment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The purpose of ____ is to identify the significant risks that could impact the corporate objectives,
stakeholder expectations, core processes and key dependencies.

A

Risk Assesment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

3 Activities during Risk Assessment

A

– Risk identification
– Risk Analysis
– Risk evaluation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

_____ is to find, recognize and describe risks that might help or prevent
an organization in achieving its objectives

A

Risk Identification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

true or false

Relevant, appropriate and out-to-date information is important in identifying risks

A

false; up to date

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

t or f : The organization should identify risks, whether or not their sources are under its control.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Read only
Factors to Consider in Risk Identification
▪ Tangible and intangible sources of risks
▪ Causes and events
▪ Threats and opportunities
▪ Vulnerabilities and capabilities
▪ Changes in the external and internal context
▪ Indicators of emerging risks
▪ The nature and value of assets and resources
▪ Consequences and their impact on objectives
▪ Limitations of knowledge and reliability of information
▪ Time-related factors
▪ Biases, assumptions and beliefs of those involved

A

ok

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

its purpose is to comprehend the nature of risk and its characteristics including, the level of risk.

A

Risk analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

____ involves a detailed consideration of uncertainties, risk sources, consequences,
likelihood, events, scenarios, controls and their effectiveness and can be undertaken with varying
degrees of detail and complexity, depending on the purpose of the analysis, the availability and
reliability of information, and the resources available

A

Risk analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

true or false
Analysis techniques can be qualitative or quantitative, but never a combination of these, depending on the circumstances and intended use.

A

false, sinve may combination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

T or F

Highly uncertain events can be difficult to quantify and will require using quantative techniques to provides greater insight.

A

F. combine quali and quanti techniques

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

T or F

Risk identification provides an input to risk evaluation, to decisions on whether risk needs to be treated
and how, and on the most appropriate risk treatment strategy and methods.

A

F

should be R. analysis, not R. identification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Read only

Factors to Consider in Risk Analysis
▪ The likelihood of events and consequences
▪ The nature and magnitude of consequences
▪ Complexity and connectivity
▪ Time-related factors and volatility
▪ The effectiveness of existing controls
▪ Sensitivity and confidence levels

A

ok

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Activity in risk assessment that support decisions.

A

risk evaluation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

_____ involves comparing the results of the risk analysis with the established risk criteria to determine where additional action is required.

A

Risk evaluation

17
Q

t or f

Risk eval decision could be:
▪ Do nothing further

A

True

Bonus:
other decisions in r. eval

▪ Consider risk treatment options
▪ Undertake further analysis to better understand the risk
▪ Maintain existing controls
▪ Reconsider objectives

18
Q

Which Risk management approach?

When risk assessment is being undertaken by the Board of Directors, the Chief Executive Officer
(CEO) and the other top-level management of an organization

A

Top down risk assessment

19
Q

Which Risk management approach?

When risk assessments are undertaken by involving individual members of staff and local department management.

A

Bottom-up Risk Assessment
— Focus more on Internal than Exteranal
— Time Consuming
– Very Detailted

20
Q

Risk Assessment Techniques

THE USE OF ___ o collect information that will assist with the recognition of the
significant risks

A

QUESTIONNAIRES AND CHECKLISTS

21
Q

Risk Assessment Techniques

Collection and sharing of ideas at workshops to discuss the events that could impact the objectives, core processes or key dependencies.

A

Workshops and Brainstorming

22
Q

Risk Assessment Techniques

Physical inspections of premises and activities and audits of compliance with established systems and procedures.

A

Inspections and Audits

23
Q

TRUE OR FASE

Questionnaires and
Checklists are Difficult to use for strategic risks

A

false.

should be Flow Charts and
Dependency Analysis

24
Q

R. Assessment techniques

It has the benefit that it also considers the upside of risk by evaluating opportunities in the external
environment.
▪ One of its strengths is that it can be linked to strategic decisions.

A

SWOT Analysis

strengths, weaknesses, opportunities, and threats

25
Q

well-established structure with proven results for undertaking brainstorming sessions during risk assessment workshops

A

pestle analysis

26
Q

R. Assessment techniques

  • A structured approach that ensures that no risks are omitted. It studies are often undertaken of hazardous chemical installations and complex transport structures, such as railways and nuclear power
    stations.
    ▪ It can also be applied to the analysis of the safety of products.
    ▪ It is a very analytical and time consuming
A

HAZOP (Hazard and Operability)

27
Q

▪ It is a process that is being used by reliability engineers to understand potential industrial hazards and
prevent accidents.
▪ It in risk management is used to evaluate the severe consequences of failure, how likely it is for the
failure to occur and the chance of detecting the failure before it happens

A

FMEA (Failures Modes and Effect Analysis)

  • very analytical and time-consuming approach
28
Q

The most commonly use risk matrix is the _____, one that demonstrates the relationship between the likelihood of the risk materializing and the
impact of the event should the risk
materialize

A

likelihood/impact matrix

29
Q

___ s a simple visual
presentation of the significant risks that have been recognized or identified

A

Risk matrix

30
Q

Definitions of likelihood

Can reasonably be expected to occur, but has only occurred 2 or 3 times
over 10 years in the organization or similar organizations

A

unlikely

31
Q

Definitions of likelihood

Has occurred in the organization more than 3 times in the past 10 years
or occurs regularly in similar organizations, or is considered to have a reasonable likelihood of occurring in the next few years.

A

POssible

32
Q

Definitions of likelihood

Occurred more than 7 times over 10 years in the organization or in other
similar organizations, or circumstances are such that it is likely to happen
in the next few years

A

Likely

33
Q

Definitions of likelihood

has occurred 9 or 10 times in the past 10 years in this organization, or
circumstances have arisen that will almost certainly cause it to happen

A

Almost certain

34
Q

Definitions of Impact/Magnitude

No impact on patient health; minor reduction of reputation in the short
run; no violation of law; negligible economic loss which can be restored

A

Small

35
Q

Definitions of Impact/Magnitude

Minor temporary impact on patient health; small reduction of reputation
that may influence trust for a short time; violation of law that results in a
warning; small economic loss that can be restored.

A

moderate

36
Q

Definitions of Impact/Magnitude

Serios impact on health; serious loss of reputation that will influence
trust and respect for a long time; violation of law that results; large
economic loss that cannot be restored.

A

Severe

37
Q

Definitions of Impact/Magnitude

Death or permanent reduction of health of patient; serious loss of
reputation that is devasting for trust; serious violation of law;
considerable economic loss that cannot be restored.

A

Catastrophic