PECB ISO-31000-Lead-Risk-Manager 問題集

質問 1：
Which statement regarding the risk management policy is correct?
A. A risk management policy cannot be aligned with other internal policies
B. A risk management policy should undergo a review only when the organization's internal context changes
C. A risk management policy should be developed only after risks are identified
D. A risk management policy should clearly define the organization's risk appetite
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Who is responsible for collecting, recording, and storing the data needed for risk measurement?
A. Information collectors
B. Information owners
C. Risk owners
D. Measurement clients
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
What is an example of a requirement related to risk management that an organization mandatorily must comply with?
A. Voluntary industry guidelines
B. Obligations arising under contractual arrangements with the organization
C. Organizational requirements, such as policies and procedures
D. Permits, licenses, or other forms of authorization
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
What is an example of a risk management objective at an operational level?
A. Become a recognized leader in sustainability by achieving carbon neutrality across all operations by 2030.
B. Expansion of the organization's market share by 25% within the next 3 months.
C. Reduce staff turnover rates to 60% per annum.
D. Increase shareholder value over the long term.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
In the COSO ERM framework, which component focuses on assessing how risks affect the achievement of goals and applying measures to stay aligned with them?
A. Review and revision
B. Performance
C. Governance and culture
D. Strategy and objective-setting
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Scenario 7:
Maxime, a chocolate manufacturer headquartered in Ghent, Belgium, produces toffees, eclairs, enrobed chocolates, and caramels. In 2023, a contamination incident in its caramel line triggered a large-scale product recall across Europe, exposing weaknesses in supplier evaluation, reporting channels, and crisis communication. Recognizing the financial, operational, and reputational impact of this event, top management decided to apply a risk management process in line with ISO 31000. The aim was to strengthen resilience, embed risk awareness across departments, and ensure risks are systematically managed in both daily operations and long-term strategies.
To ensure that the risk management process is effective, Maxime set up a structured monitoring and review process with clear procedures for collecting and analyzing data on key risks like supplier reliability, food safety, and communication. For validation of measurement methods, Sophie, the head of Quality Assurance, was tasked with assessing whether the tools used were suitable for evaluating the effectiveness of the process.
Additionally, Maxime introduced a set of measures designed to provide early warning indicators across critical areas. In operations, they tracked the number of production line stoppages and the percentage of defective batches. On the financial side, they monitored fluctuations in raw material prices, especially cocoa, and their impact on margins. For regulatory matters, they followed the frequency of nonconformities identified during inspections. In terms of technology, system downtime in automated packaging lines was measured.
To ensure these indicators were communicated effectively, Sophie worked with top management to present the results in a format that made changes easy to spot and understand. Rather than relying only on static reports, they chose a more dynamic approach that displayed key values visually, highlighted deviations, and issued alerts when thresholds were crossed.
In addition, Maxime established clear communication and consultation processes to ensure that relevant stakeholders were properly engaged. The top management used an approach that clarified who was responsible for carrying out tasks, who held final accountability, who should be consulted for expertise, and who needed to stay informed. To strengthen engagement, Maxime organized how risk information would be delivered to different audiences. Employees received updates during team briefings and through the company's internal platform, while external parties, such as suppliers and regulators, were informed through formal reports and direct correspondence. This approach ensured that each group had access to the information most relevant to them in a timely way.
Based on the scenario above, answer the following question:
Which communication principle did Maxime adhere to by organizing how information was delivered to employees, suppliers, and regulators? Refer to Scenario 7.
A. Channels
B. Context
C. Content
D. Frequency
正解：A
解説: (Topexam メンバーにのみ表示されます)