Business and Project Management

A Mitigation Plan is specifically designed to overcome or reduce identified risks. It outlines strategies, actions, and resources to minimize the likelihood or impact of risks. While migration and master plans address broader organizational changes, and maintenance plans handle ongoing support, only mitigation plans directly target risk response and reduction.

Quality culture originates from leadership. Senior management establishes the organizational tone, priorities, resource allocation, and behavioral expectations that shape culture. Quality and Training departments support implementation but cannot primary responsibility for setting culture.

Risk management comprises two core activities: identification (recognizing potential risks) and response development (creating strategies to address them). Response strategies include mitigation, transfer, avoidance, or acceptance based on risk analysis and organizational priorities.

In this context, EM (likely Exception Manager or similar) is also referred to as Case Manager, suggesting these roles are equivalent or related in the system.

Flows and Assignments work together to route work and resolve work. Flows define the path (routing) while assignments capture user resolutions. The other options describe different but incomplete aspects.

In rule engine terminology, the list of eligible rules ready to be fired is called the 'agenda'. The agenda contains rules whose conditions have been evaluated to true and are waiting in queue to execute. 'Rule group' and 'eligible rules' are descriptive terms but not the formal name. 'Agenda filter' is something that affects the agenda, not the agenda itself.

Security policies are broad, high-level statements from top management that establish the organization's security stance. They differ from procedures (detailed instructions) and guidelines (recommended practices). Policies are mandatory and management-driven.

Report creation is typically restricted to Report Designers who have the technical expertise to build reports, and Administrators who have the permissions. Report Analysts generally consume and analyze existing reports rather than create them.

The Operations Manager acts as the primary escalation point for vendor-managed resources, handling performance issues, coaching, and staff development. This role sits above AOD and Service Lead in the escalation chain, with broader responsibility for vendor relationships and team management.

Hi-Pri management is responsible for taking notes throughout an incident and providing updates into UTS (Universal Ticketing System). This ensures proper documentation and tracking of incident progress.

In the Workflow Optimization model, Triage is the first point of contact for incident management. Triage assesses and routes incidents appropriately. SD (Service Desk) (A) typically handles different types of requests, and SIE/NIE (C, D) are specialized teams.

In ITIL and service management, resources and capabilities are fundamental assets used by organizations to create value. Resources typically include IT infrastructure, applications, information, and people, while capabilities refer to the organization's ability to coordinate, control, and deploy these resources. Together, they are used to create value in the form of goods and services that are delivered to customers. Option B correctly captures this core ITIL concept.

Inspections are the most formal review process, requiring documented artifacts, trained moderators, and structured participants. Option D is NOT true because inspections fundamentally require written documents or code to review - they cannot be performed on unwritten or口头 materials. Managers can participate in inspections of management documents, and trained leaders should moderate inspections. The need for documentation is what makes D the false statement.