nerdexam
(ISC)2

CAP · Question #25

You are preparing to start the qualitative risk analysis process for your project. You will be relying on some organizational process assets to influence the process. Which one of the following is NOT

The correct answer is B. Review of vendor contracts to examine risks in past projects. Reviewing vendor contracts is a procurement activity and is not a standard organizational process asset (OPA) input used in the qualitative risk analysis process.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

You are preparing to start the qualitative risk analysis process for your project. You will be relying on some organizational process assets to influence the process. Which one of the following is NOT a probable reason for relying on organizational process assets as an input for qualitative risk analysis?

Options

  • AInformation on prior, similar projects
  • BReview of vendor contracts to examine risks in past projects
  • CRisk databases that may be available from industry sources
  • DStudies of similar projects by risk specialists

How the community answered

(62 responses)
  • A
    8% (5)
  • B
    73% (45)
  • C
    15% (9)
  • D
    5% (3)

Why each option

Reviewing vendor contracts is a procurement activity and is not a standard organizational process asset (OPA) input used in the qualitative risk analysis process.

AInformation on prior, similar projects

Information on prior similar projects is a classic OPA that provides historical probability and impact data for risk assessment.

BReview of vendor contracts to examine risks in past projectsCorrect

Vendor contracts are procurement documents, not organizational process assets relevant to qualitative risk analysis. OPAs for qualitative risk analysis typically include historical project data, lessons learned, risk databases, and specialist studies - all of which provide reference data for assessing probability and impact, whereas vendor contracts address commercial terms and obligations.

CRisk databases that may be available from industry sources

Industry risk databases are recognized OPAs that supply benchmarking data on risk likelihood and consequence.

DStudies of similar projects by risk specialists

Studies of similar projects by risk specialists constitute expert judgment and historical OPA data used to calibrate risk ratings.

Concept tested: Qualitative risk analysis OPA inputs per PMBOK

Source: https://www.pmi.org/pmbok-guide-standards/foundational/pmbok

Topics

#Qualitative Risk Analysis#Organizational Process Assets (OPAs)#Risk Management Inputs

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAP Practice