Practice test

Booker Framework and Enterprise Crisis Response Practice Exam

10-question practice exam on Booker’s eight-step risk management framework, response strategies, KRIs, accountability, monitoring, reporting, and crisis coordination using the PulseSense Health case.

10 questions · pass mark 50%

Try the first five — pick an answer to see if you got it right.

1 Which sequence correctly states Booker’s eight-step risk management framework?

Identify, assess, measure, decide response, assign responsibility, monitor, report, inform
Identify, measure, assess, avoid, transfer, monitor, report, inform
Assess, identify, measure, assign responsibility, report, monitor, inform, respond
Identify, assess, transfer, mitigate, monitor, report, inform, review

Explanation: The study material presents Booker’s framework as a continuous cycle consisting of identify, assess, measure, decide response, assign responsibility, monitor, report, and inform.

2 The Measure step focuses only on financial loss and excludes operational indicators.

True
False

Explanation: False. The Measure step includes probability and severity as well as KRIs such as patch cycles, cloud uptime, defect rates, and supplier metrics.

3 Which of the following are examples of Key Risk Indicators (KRIs) in the PulseSense case? Select all that apply.

Vulnerability patch cycles
Cloud-service uptime
Software defect percentages
Supplier performance trackers
Annual employee vacation balances

Explanation: The material specifically identifies patch cycles, uptime, defect percentages, and supplier performance metrics as KRIs. Vacation balances are not listed.

4 Which response strategy best fits purchasing cyber insurance for residual cyber risk?

Avoid
Accept
Transfer
Monitor

Explanation: Buying cyber insurance shifts some financial exposure to another party, which is an example of risk transfer.

5 What is the main purpose of assigning responsibility in Booker’s framework?

To eliminate the need for reporting
To ensure risk responses are translated into accountable daily action
To replace monitoring with delegation
To move all risk ownership to the Board

Explanation: The source explains that clearly defined roles, including departmental risk champions, make risk responses operational and accountable.

5 more questions locked

Take the full test in the Paper Per Hour study app — instant marking, explanations for every answer, and a pass mark of 50%.

Take the full test in the app

Back to MGMT 623: Organizational Risk & Crisis Management Plan