Question One: What is the ISO31000 definition of risk and what is the utility of this definition?
Question Two: In what way is pure risk different from a threat?
Question Three: What is the difference between due diligence and risk management? Illustrate your answer with examples?
Question Four: How would you use control tools to impact on the likelihood and consequences of a risk event?
Question Five: Discuss the following statement:
"Methodology is the core behind modern risk management."
Question Six: In what way does culture impact on an organisations ability to pro-actively engage and manage its risk environment?
Question Seven: Explain the concept of 'strategic risk' and the role that stakeholders have in identifying such risk?
Question Eight: Describe how governance and compliance are linked to an organisations risk management model and describe the role of internal control in this activity?
Question Nine: Outline the model of risk management illustrated within the Australian Standard. Provide as complete as possible description of each stage, not forgetting the connective linkages, and provide a line model of the process?
Question Ten: Describe the process referred to as business continuity planning and outline the function it serves?