Hard1 markMultiple Choice
Task 1: Plan and manage project complianceBusiness EnvironmentComplianceTask 1Risk

PMP · Question 10 · Task 1: Plan and manage project compliance

A project manager is quantifying the potential impact of non-compliance with a new data protection law. The legal team estimates a 20% probability of a fine of $500,000 if the project is found non-compliant. The cost to implement the necessary controls is $80,000.<br/><br/>Based on Expected Monetary Value (EMV) analysis, what is the MOST logical business decision?

Answer options:

A.

Do not implement controls because the cost ($80,000) is less than the fine ($500,000).

B.

Implement the controls because the cost ($80,000) is less than the risk exposure ($100,000).

C.

Do not implement controls because the cost ($80,000) is greater than the risk exposure ($10,000).

D.

Implement the controls regardless of cost because compliance is mandatory.

How to approach this question

Calculate EMV: Probability * Impact. Compare EMV to Cost of Prevention.

Full Answer

B.Implement the controls because the cost ($80,000) is less than the risk exposure ($100,000).✓ Correct
EMV = 0.20 * $500,000 = $100,000. This is the 'cost' of the risk. The cost to prevent it is $80,000. Since preventing it is cheaper than the expected cost of the risk ($80k < $100k), the logical business decision is to implement the controls.

Common mistakes

Comparing the cost of control directly to the full fine amount (A) rather than the probability-weighted amount.

Practice the full PMP Business Environment Domain Practice Exam

60 questions · hints · full answers · grading

More questions from this exam