In the EPI framework for risk management, after the risk identification and risk analysis steps, the risk evaluation step determines whether the assessed risks are acceptable or require treatment based on the organization’s risk appetite, criteria, and the potential impact. The evaluation leads to a decision on whether risk treatment needs to take place.

It is not simply compiling all risks (so option C is incorrect).

It is not exclusively about budgeting (so option D is incorrect) though budgeting follows treatment decisions.

It is not necessarily advising to accept all risks (so option B is incorrect) but rather it supports decision-making on treatment.

Therefore, option A is correct: the outcome is the decision whether to treat the risk.

EPI DCFOM-Aligned Reference Concepts

Risk evaluation assesses identified and analysed risks against risk criteria to decide on acceptability or need for treatment.

The outcome is a documented decision-making step in the risk management process.

EPI’s governance and risk management principles clearly state:

When a data center outsources maintenance, operational work can be outsourced, but risk cannot be transferred .

Risk may be shared , mitigated, or reduced through contractual arrangements, but ownership remains with the data center service provider .

The data center operator is still responsible for ensuring compliance, operational continuity, and safety—even if another party performs the maintenance tasks.

Therefore:

The service provider must remain involved in risk evaluation, risk treatment, and ongoing monitoring.

Oversight responsibilities cannot be delegated.

Options C and D are incorrect because outsourcing the activity does not outsource risk accountability.

Option B is irrelevant because risk responsibility does not depend on provider expertise.

Thus, A is correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Risk ownership remains with the organization even when maintenance is outsourced.

Outsourcing shares risk but does not transfer it.

The data center must maintain involvement in the risk management process.

In EPI’s safety and statutory requirements framework, the Safety Manager’s role is strictly supervisory during ongoing work activities . They are responsible for monitoring, verifying compliance, ensuring safe practices, and intervening only to correct unsafe conditions— not to physically participate in the hazardous task .

Key safety principles include:

Independence of the Safety Function The Safety Manager must remain impartial and fully observant. If they participate directly in labor activities (such as lifting equipment), they can no longer maintain oversight of:

ongoing safety compliance

worker actions

environmental hazards

risk escalation

Conflict of Responsibilities By physically engaging in the task, the Safety Manager becomes distracted and loses supervisory visibility, which introduces risk to the entire operation.

Competency and Authorization Requirements Personnel assigned to physically move heavy equipment must:

be authorized workers

be trained in manual handling

have been briefed for the specific PTW-controlled activity

The Safety Manager is not part of the operational lifting team unless specifically assigned beforehand, which is not the case here.

EPI’s Supervisory Separation Principle The safety oversight role must remain dedicated and unbroken during all hazardous or controlled work activities.

Therefore, the Safety Manager must not step in to replace or supplement labor resources.

Correct answer: A — No.

EPI DCFOM-Aligned Reference Concepts

Safety oversight must remain independent and uninterrupted.

Safety Manager responsibilities do not include participating in physical hazardous activities.

Supervisory personnel cannot assume operational roles during high-risk work.

While not strictly internal to EPI’s core domain (which deals with data centre operations), this question refers to the external risk landscape, as identified by the World Economic Forum (WEF). The WEF’s Global Risks Report 2025 shows that environmental risks dominate the 10-year horizon , with extreme weather, ecosystem collapse, and climate-related disruption ranking highest.

Specifically, global climate change (or extreme weather/climate-related events) is rated as the most severe risk over the next decade. While water scarcity and air quality are significant, the WEF ranks climate change / extreme weather as the top long-term threat. Therefore, option A is the most correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Environmental sustainability forms a major component of data centre operations risk and resilience planning.

External macro-risks such as climate change must be integrated into facility resilience, power planning, cooling design, and business continuity strategies.

Leadership qualities emphasized in EPI’s data center organizational framework include:

Accountability : taking ownership of decisions and actions.

Empathy : understanding staff perspectives and motivating teams.

Honesty : demonstrating integrity and trustworthiness.

These traits support effective team management, professional communication, and high-reliability operations in mission-critical environments.

“Funny” is not a leadership quality recognized in any professional leadership framework.

While being personable can help morale, humor is not a leadership competency.

Thus, D is the correct answer.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Leadership qualities relate to responsibility, integrity, and the ability to motivate and support teams.

Humor is not a defined leadership competency.

Accurate asset management relies heavily on clear, enforced procedures for:

Logging asset movement

Updating location records

Recording installations, removals, or relocations

Maintaining accurate configuration and asset databases

If assets are located in different places than recorded, the root cause is typically:

“Lack of procedures” or failure to follow them.

Without proper procedures:

Staff may move items without documentation.

Asset updates may not be recorded.

Inventory lists become outdated.

Tracking and audit functions fail.

Why other options are incorrect:

A : Training is important but secondary; without procedures, training has no structure.

C : Most modern asset systems can track locations; the issue is usually process-related, not system capability.

D : Financial constraints do not cause incorrect asset locations.

Thus, B is correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Asset management accuracy depends on well-defined and enforced procedures.

Incorrect asset locations typically indicate process failures, not financial or system issues.

For environmental management systems (EMS), the internationally recognized and adopted standard is:

ISO 14001 — Environmental Management Systems

ISO 14001 provides a framework for:

Environmental policy

Environmental impact assessment

Sustainability objectives

Compliance obligations

Environmental performance monitoring

Continuous improvement

Why the other options are incorrect:

A – EU-COC : Energy efficiency best practices for data centers, not a full EMS.

B – ISO 50001 : Energy management standard, focusing on energy efficiency only.

C – LEED : Building sustainability certification, not a management system.

Thus, D is correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

ISO 14001 is the recognized standard for environmental management systems.

Supports sustainability, compliance, and environmental performance improvement.

EPI distinguishes between:

Service Portfolio → internal document used for service design, planning, assessment

Service Catalog → customer-facing document listing available services

The service catalog provides customers with:

Service descriptions

Service options

Ordering information

Terms and conditions

SLA details

Pricing models (where applicable)

It is specifically designed to allow customers to select and order services.

Why other options are incorrect:

A : Service portfolio is internal only.

B : BCP is unrelated to service ordering.

C : Needs analysis is internal planning documentation.

Thus, D is correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

The service catalog contains all customer-orderable services.

It is the primary communication tool for customer consumption.