Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Scenarios with threats and impacts When performing qualitative risk analysis, scenarios that consider both threats and impacts are essential to produce comprehensive results. This approach involves identifying potential threats (such as risks or vulnerabilities) and assessing the potential impacts or consequences they may have on the organization. By considering both the threats and the impacts, you can develop a more complete understanding of the risks and their potential consequences, which is crucial for making informed decisions about risk mitigation and management.
While the other options (B, C, and D) can be valuable components of risk analysis, they may not be as comprehensive on their own and are often used in conjunction with scenario-based risk analysis. Cost-benefit analysis (B) can help in evaluating the economic aspects of risk mitigation measures. Assessing the value of information assets (C) is important for understanding the significance of the assets at risk. Vulnerability assessment (D) helps identify weaknesses in a system, which is a critical aspect of risk analysis but doesn't provide a complete picture on its own.
Why not B? If The costs and benefits may be calculated using both qualitative and quantitative measures.