Which of the following is not a part of Identify Risks process?

The correct answer is A. Decision tree diagram. The Identify Risks process uses diagramming techniques such as cause-and-effect (Ishikawa/fishbone) diagrams, influence diagrams, and system or process flow charts to uncover potential risks. A decision tree diagram is a tool used in Perform Quantitative Risk Analysis, not in Ide

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

ADecision tree diagram
BCause and effect diagram
CInfluence diagram
DSystem or process flow chart

How the community answered

(58 responses)

A
95% (55)
B
2% (1)
C
2% (1)
D
2% (1)

Explanation

The Identify Risks process uses diagramming techniques such as cause-and-effect (Ishikawa/fishbone) diagrams, influence diagrams, and system or process flow charts to uncover potential risks. A decision tree diagram is a tool used in Perform Quantitative Risk Analysis, not in Identify Risks. Decision trees help calculate expected monetary value (EMV) of different decision paths, which is a quantitative, not identification-phase, activity.

Topics

#Risk Identification Techniques#Risk Management Process#Decision Analysis Tools

Community Discussion

No community discussion yet for this question.

Full CAP Practice