Management of risk principles and concepts
This domain tests whether you can use M_o_R principles and core risk concepts to interpret scenarios, not just recite definitions. Expect questions on the purpose of risk management, the principles that shape a sound approach, and the vocabulary used to assign accountability and set response boundaries.
Principles that drive decisions
M_o_R presents risk management as creating value, being integral to processes and decision making, explicitly addressing uncertainty, being systematic, structured and timely, using best available information, being tailored, and taking human and cultural factors into account. In exam scenarios, a principle is a test of design: if a risk register exists but is not used in decisions, the principle of integration with decision making is breached.
Core concepts
- Risk: uncertainty that, if it occurs, affects objectives; it can be a threat or an opportunity.
- Risk appetite: the amount and type of risk an organisation is willing to seek or accept in pursuit of objectives.
- Risk tolerance: the measurable boundaries around appetite, often expressed as thresholds on a matrix.
- Risk capacity: the maximum risk the organisation can bear before viability is threatened.
- Risk owner: accountable for managing a risk and its response; risk actionee: carries out actions.
- Risk attitude: the disposition towards risk, shaped by culture and experience; not the same as appetite.
Worked example
A project has a 4x3 risk (score 12) to a critical supplier failing. The programme tolerance is 10. The risk owner proposes accept and monitor. Reasoning: the score exceeds tolerance, so acceptance without escalation is wrong; the owner must plan a response (reduce probability through a second supplier, or transfer via contract) and escalate because the residual exposure may still exceed tolerance. The actionee updates the register; the owner remains accountable.
Traps
Confusing appetite (desire) with tolerance (limit); naming a person who does the work as owner; treating opportunities as out of scope; and quoting principles without linking them to the scenario.