What characterizes a mature FM strategy with respect to risk tolerance?

What characterizes a mature FM strategy with respect to risk tolerance?

• A. Lacks defined risk tolerance.
• B. Has a stated risk tolerance and structured mitigation plans.
• C. Ignores mitigation plans.
• D. Focuses only on opportunities, not risks.

Answer: (B)

In a mature FM strategy, risk is actively defined and managed. The organization sets a defined risk tolerance—the level of risk it is willing to accept in pursuit of its objectives—and then builds structured mitigation plans to keep risk within that tolerance. This means identifying potential risks, evaluating their likelihood and impact, assigning owners, and implementing controls and contingency measures. Regular monitoring, review, and reporting ensure residual risk remains within the established tolerance and plans are updated as conditions change.

Why this is the best approach: having a stated risk tolerance provides clear guardrails for decisions and investments, while structured mitigation shows a proactive, organized method to reduce risk rather than leaving it unmanaged or ignored. This combination reflects intentional, governance-driven risk management.

Choosing a path that lacks defined risk tolerance leads to inconsistent decision-making and uncontrolled exposure. Ignoring mitigation plans leaves risks unaddressed and ripe for disruption. Focusing only on opportunities without considering risks creates an unbalanced approach that can undermine overall objectives.