Risk mitigation strategies in Software Engineering - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main goal of risk mitigation strategies?

The main goal is to reduce the chance or impact of risks that could harm a project or system.

beginner

Name one common risk mitigation strategy.

One common strategy is risk avoidance, which means changing plans to prevent the risk from happening.

intermediate

How does risk transfer work in risk mitigation?

Risk transfer means shifting the risk to another party, like buying insurance or outsourcing a task.

intermediate

What is the difference between risk reduction and risk acceptance?

Risk reduction tries to lower the chance or impact of a risk, while risk acceptance means acknowledging the risk and preparing to deal with it if it happens.

beginner

Why is monitoring risks important in risk mitigation?

Monitoring helps detect new risks early and checks if current strategies are working, so adjustments can be made.

Which of the following is NOT a risk mitigation strategy?

A Risk ignoring

B Risk avoidance

C Risk transfer

D Risk reduction

Ignoring risks is not a strategy; it leaves risks unmanaged and can cause problems.

What does risk transfer usually involve?

A Changing the project plan to avoid risk

B Reducing the chance of risk

C Accepting the risk without action

D Shifting risk responsibility to another party

Risk transfer means passing the risk to someone else, like through insurance or contracts.

Which strategy means preparing to handle a risk if it happens without trying to prevent it?

A Risk reduction

B Risk acceptance

C Risk avoidance

D Risk transfer

Risk acceptance means acknowledging the risk and planning to manage it if it occurs.

Why is risk monitoring important?

A To detect new risks and check strategy effectiveness

B To ignore small risks

C To transfer all risks

D To avoid all risks completely

Monitoring helps spot new risks early and ensures current plans are working well.

Which risk mitigation strategy involves changing plans to stop a risk from happening?

A Risk transfer

B Risk acceptance

C Risk avoidance

D Risk reduction

Risk avoidance means altering plans to prevent the risk entirely.

Explain the four main types of risk mitigation strategies and give a simple example for each.

Think about how you might handle a risk in everyday life, like avoiding a slippery path or buying insurance.

Why is it important to monitor risks continuously during a project?

Consider how checking your car regularly helps prevent breakdowns.

Practice

1. What is the main goal of risk mitigation in software engineering projects?

easy

A. To reduce the chance and impact of problems before they occur

B. To increase the project budget to handle unexpected costs

C. To delay the project timeline to avoid risks

D. To ignore minor risks and focus only on major ones

Solution

1. Step 1: Understand the purpose of risk mitigation

   Risk mitigation is about planning actions to reduce risks before they cause problems.

2. Step 2: Identify the best description of this purpose

   To reduce the chance and impact of problems before they occur clearly states reducing chance and impact of problems before they happen, which matches the goal.

3. Final Answer:

   To reduce the chance and impact of problems before they occur -> Option A

4. Quick Check:

   Risk mitigation = reduce problems early [OK]

Hint: Risk mitigation means stopping problems before they start [OK]

Common Mistakes:

• Confusing risk mitigation with increasing budget
• Thinking risk mitigation delays projects
• Ignoring small risks completely

2. Which of the following is a correct step in the risk mitigation process?

easy

A. Identifying and analyzing potential risks

B. Ignoring risks that seem unlikely

C. Waiting until a risk happens to act

D. Removing all risks completely

Solution

1. Step 1: Recall the main steps of risk mitigation

   Risk mitigation involves identifying, analyzing, planning, and monitoring risks.

2. Step 2: Match the options to these steps

   Identifying and analyzing potential risks matches the first and important step: identifying and analyzing risks.

3. Final Answer:

   Identifying and analyzing potential risks -> Option A

4. Quick Check:

   Risk mitigation step = identify and analyze [OK]

Hint: Risk mitigation starts by spotting risks early [OK]

Common Mistakes:

• Ignoring unlikely risks completely
• Waiting to act after problems occur
• Thinking all risks can be removed

3. Consider this scenario: A project team identifies a risk of delayed delivery due to supplier issues. They decide to have a backup supplier ready. What risk mitigation strategy are they using?

medium

A. Risk avoidance

B. Risk contingency planning

C. Risk transfer

D. Risk acceptance

Solution

1. Step 1: Understand the scenario

   The team prepares a backup supplier to handle possible delays from the main supplier.

2. Step 2: Identify the strategy type

   Having a backup plan ready is a contingency plan to reduce impact if risk happens.

3. Final Answer:

   Risk contingency planning -> Option B

4. Quick Check:

   Backup plan = contingency planning [OK]

Hint: Backup plans are contingency strategies [OK]

Common Mistakes:

• Confusing contingency with risk avoidance
• Thinking transferring risk means backup plans
• Assuming acceptance means preparing backups

4. A project manager wrote this risk mitigation plan: "If a key developer leaves, we will do nothing and hope for the best." What is wrong with this plan?

medium

A. It ignores risk acceptance as a valid strategy

B. It overestimates the risk impact

C. It lacks a proactive risk mitigation action

D. It transfers the risk to another team

Solution

1. Step 1: Analyze the plan's approach to risk

   The plan chooses to do nothing and hope, which is passive and not proactive.

2. Step 2: Identify the problem with this approach

   Effective risk mitigation requires planning actions, not ignoring risks.

3. Final Answer:

   It lacks a proactive risk mitigation action -> Option C

4. Quick Check:

   Ignoring risks = no mitigation action [OK]

Hint: Good plans always include proactive steps [OK]

Common Mistakes:

• Thinking risk acceptance means ignoring risks
• Confusing risk transfer with ignoring risks
• Assuming risk impact is exaggerated

5. A software project uses risk mitigation by splitting a large risky task into smaller parts and testing each part early. What benefit does this strategy provide?

hard

A. It accepts risk and delays the project

B. It avoids risk by not doing the task

C. It transfers risk to another team

D. It reduces risk impact by early detection and control

Solution

1. Step 1: Understand the strategy used

   Breaking a big task into smaller parts and testing early helps find problems sooner.

2. Step 2: Identify the benefit of early testing

   Early detection allows fixing issues before they grow, reducing impact and delays.

3. Final Answer:

   It reduces risk impact by early detection and control -> Option D

4. Quick Check:

   Early testing = reduce impact [OK]

Hint: Small tests catch problems early, lowering risk impact [OK]

Common Mistakes:

• Confusing risk transfer with breaking tasks
• Thinking avoiding risk means skipping tasks
• Assuming acceptance means delaying work