nerdexam
(ISC)2

CAP · Question #330

The only output of the perform qualitative risk analysis are risk register updates. When the project manager updates the risk register he will need to include several pieces of information including a

The correct answer is B. Risk probability-impact matrix. When the risk register is updated as an output of the Perform Qualitative Risk Analysis process, the updates typically include: relative ranking or priority list of risks, risks grouped by categories, causes of risk, list of risks requiring additional analysis and response, and a

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The only output of the perform qualitative risk analysis are risk register updates. When the project manager updates the risk register he will need to include several pieces of information including all of the following except for which one?

Options

  • ATrends in qualitative risk analysis
  • BRisk probability-impact matrix
  • CWatchlist of low-priority risks
  • DRisks grouped by categories

How the community answered

(58 responses)
  • A
    3% (2)
  • B
    91% (53)
  • C
    2% (1)
  • D
    3% (2)

Explanation

When the risk register is updated as an output of the Perform Qualitative Risk Analysis process, the updates typically include: relative ranking or priority list of risks, risks grouped by categories, causes of risk, list of risks requiring additional analysis and response, and a watchlist of low-priority risks. Trends in qualitative risk analysis results (Option A) are also tracked as updates when analysis is repeated. The Risk Probability-Impact Matrix (Option B) is NOT an output - it is an INPUT (a tool and technique) used during the qualitative risk analysis process to score and rank risks. It is defined in the risk management plan before the process begins. Because the question asks for the item that is NOT included in risk register updates, the probability-impact matrix is the correct exception.

Topics

#Risk Management#Qualitative Risk Analysis#Risk Register#Risk Analysis Outputs

Community Discussion

No community discussion yet for this question.

Full CAP Practice