Section: Volume D

Explanation/Reference:
Explanation:
A risk event is being exploited so as to identify the opportunities for positive impacts. Exploit response is one of the strategies to negate risks or threats that appear in a project. This strategy may be selected for risks with positive impacts where the organization wishes to ensure that the opportunity is realized.
Exploiting a risk event provides opportunities for positive impact on a project. Assigning more talented resources to the project to reduce the time to completion is an example of exploit response.
Incorrect Answers:
A: To avoid a risk means to evade it altogether, eliminate the cause of the risk event, or change the project plan to protect the project objectives from the risk event.
B: Accepting is a risk response that is appropriate for positive or negative risk events. It does not pursue the risk, but documents the event and allows the risk to happen. Often acceptance is used for low probability and low impact risk events.
D: Enhancing is a positive risk response that aims to increase the probability and/or impact of the risk event.

Section: Volume D
Explanation/Reference: https://www.isaca.org/Groups/Professional-English/it-audit-tools-and-techniques/GroupDocuments/ bus_continuity_plan.pdf

is incorrect. Crashing does add costs, but in this instance, crashing is an example of the positive risk response of enhancing. Answer:A is incorrect. Crashing is a positive risk response. Generally, crashing doesn't add risks and is often confused with other predominant schedule compression techniques of fast tracking which does add risks. Answer:C is incorrect. This isn't an example of exploiting. Exploiting is an action to take advantage of a positive risk response that will happen.