nerdexam
(ISC)2

CAP · Question #148

Mark works as a project manager for TechSoft Inc. Mark, the project team, and the key project stakeholders have completed a round of qualitative risk analysis. He needs to update the risk register…

The correct answer is B. Prioritized list of quantified risks. After Perform Qualitative Risk Analysis, the risk register is updated with outputs specific to qualitative analysis: a watchlist of low-priority risks (A), risks grouped by categories (C), and trends observed across qualitative risk analysis results (D). A 'prioritized list of…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Mark works as a project manager for TechSoft Inc. Mark, the project team, and the key project stakeholders have completed a round of qualitative risk analysis. He needs to update the risk register with his findings so that he can communicate the risk results to the project stakeholders - including management. Mark will need to update all of the following information except for which one?

Options

  • AWatchlist of low-priority risks
  • BPrioritized list of quantified risks
  • CRisks grouped by categories
  • DTrends in qualitative risk analysis

How the community answered

(19 responses)
  • A
    5% (1)
  • B
    74% (14)
  • C
    16% (3)
  • D
    5% (1)

Explanation

After Perform Qualitative Risk Analysis, the risk register is updated with outputs specific to qualitative analysis: a watchlist of low-priority risks (A), risks grouped by categories (C), and trends observed across qualitative risk analysis results (D). A 'prioritized list of quantified risks' (B) is an output of Perform Quantitative Risk Analysis - it involves numerical modeling and is not produced by qualitative analysis. Since Mark has only completed qualitative risk analysis, including a quantified risk list would be incorrect. This question tests whether candidates can distinguish between the outputs of qualitative versus quantitative risk analysis processes.

Topics

#Risk Management#Qualitative Risk Analysis#Risk Register Updates#Risk Communication

Community Discussion

No community discussion yet for this question.

Full CAP Practice