easy · Project Management Professional hybrid
During a Nimbus Clinics spike, a senior engineer argues that a specific security risk is too high. The project manager reviews the risk appetite of the organization and confirms it is within the allowed threshold.
What is the next move?
- Share the risk appetite data with the engineer privately and collaborate on a mitigation strategy that stays within that appetite.
- Accept the engineer's concern and add more security controls, even if it exceeds the budget, while documenting the decision in the issue log.
- Direct the engineer to accept the risk because the organization says it is fine.
- Escalate the engineer's 'obstruction' to the Project Sponsor.
Sign up free to see the explanation and track your rank →
More Project Management Professional hybrid practice
- What should the project manager do?
- What is the Scrum Master's primary focus here as a servant leader?
- What should the project manager investigate first?
- What should the project manager do first?
- Which SECI mode is most active?
- What does 'Consulted' mean for the local Community Group in this context?
- Which Mindset Rule is the highest priority?
- Who is traditionally 'Accountable' for the effectiveness of this adaptive ceremony?