Question One: What is the ISO31000 definition of risk and what is the utility of this definition?

Question Two: In what way is pure risk different from a threat?

Question Three: What is the difference between due diligence and risk management? Illustrate your answer with examples?

Question Four: How would you use control tools to impact on the likelihood and consequences of a risk event?

Question Five: Discuss the following statement: "Methodology is the core behind modern risk management."

Question Six: In what way does culture impact on an organisations ability to pro-actively engage and manage its risk environment?

Question Seven: Explain the concept of 'strategic risk' and the role that stakeholders have in identifying such risk?

Question Eight: Describe how governance and compliance are linked to an organisations risk management model and describe the role of internal control in this activity?

Question Nine: Outline the model of risk management illustrated within the Australian Standard. Provide as complete as possible description of each stage, not forgetting the connective linkages, and provide a line model of the process?

Question Ten: Describe the process referred to as business continuity planning and outline the function it serves?