Section: Volume B
Explanation:
There is only one tool and technique available for Fred to plan risk management: planning meetings and analysis. Planning Meeting and Analysis is a tool and technique in the Plan Risk Management process.
Planning meetings are organized by the project teams to develop the risk management plan. Attendees at these meetings include the following:
* Project manager
* Selected project team members
* Stakeholders
* Anybody in the organization with the task to manage risk planning
Sophisticated plans for conducting the risk management activities are defined in these meetings, responsibilities related to risk management are assigned, and risk contingency reserve application approaches are established and reviewed.
Incorrect Answers:
A, B, D: These are not plan risk management tools and techniques.

Explanation/Reference:
Explanation:
Key Risk Indicators are the prime monitoring indicators of the enterprise. KRIs are highly relevant and possess a high probability of predicting or indicating important risk. KRIs help in avoiding excessively large number of risk indicators to manage and report that a large enterprise may have.
Incorrect Answers:
B: Lag indicators are the risk indicators that is used to indicate risk after events have occurred.
C: Lead indicators are the risk indicators that is used to indicate which capabilities are in place to prevent events from occurring.
D: Risk indicators are metrics used to indicate risk thresholds, i.e., it gives indication when a risk level is approaching a high or unacceptable level of risk. The main objective of a risk indicator is to ensure tracking and reporting mechanisms that alert staff about the potential risks.

Explanation/Reference:
Explanation:
0 nonexistent: An enterprise's risk management capability maturity level is 0 when:
The enterprise does not recognize the need to consider the risk management or the business impact

from IT risk.
Decisions involving risk lack credible information.

Awareness of external requirements for risk management and integration with enterprise risk

management (ERM) do not exists.
Incorrect Answers:
A, C, D: These all are higher levels of capability maturity model and in this enterprise is mature enough to recognize the importance of risk management.

The greatest benefit to an organization when updates to the risk register are made promptly after the completion of a risk assessment is optimized risk treatment decisions. Risk treatment decisions are the choices made by the organization on how to respond to the identified risks, such as avoiding, transferring, mitigating, or accepting them. Optimized risk treatment decisions are those that align with the organizational risk appetite and objectives, and provide the best balance between the costs and benefits of the risk response actions.
Updating the risk register promptly after the completion of a risk assessment helps to optimize risk treatment decisions by providing the most current and accurate information on the risk exposure and control environment. By updating the risk register, the organization can ensure that the risk scenarios, risk levels, risk owners, risk responses, and risk indicators are consistent with the risk assessment results and reflect the changes in the internal and external environment. Updating the risk register also helps to prioritize the risks and allocate the resources more effectively and efficiently for risk treatment. Updating the risk register also facilitates the communication, collaboration, and accountability among the stakeholders involved in the risk management and control processes.
The other options are not the greatest benefits to an organization when updates to the risk register are made promptly after the completion of a risk assessment. Improved senior management communication is a benefit of updating the risk register, as it helps to inform and involve the senior management in the risk management and control processes, but it is not the greatest benefit. Enhanced awareness of risk management is a benefit of updating the risk register, as it helps to educate and engage the staff and other stakeholders in the risk management and control processes, but it is not the greatest benefit. Improved collaboration among risk professionals is a benefit of updating the risk register, as it helps to coordinate and integrate the efforts and expertise of the risk professionals, but it is not the greatest benefit. References = Risk Register: Examples, Benefits, and Best Practices, IT Risk Resources | ISACA, Discover 10 major benefits for keeping a risk register

Section: Volume D