nerdexam
(ISC)2

CAP · Question #5

Where can a project manager find risk-rating rules?

The correct answer is B. Organizational process assets. Risk-rating rules are typically stored in Organizational Process Assets (OPAs), which include historical information, lessons learned repositories, risk databases, and policies from previous projects and the broader organization. The Risk Probability and Impact Matrix (A) is a to

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Where can a project manager find risk-rating rules?

Options

  • ARisk probability and impact matrix
  • BOrganizational process assets
  • CEnterprise environmental factors
  • DRisk management plan

How the community answered

(63 responses)
  • A
    2% (1)
  • B
    89% (56)
  • C
    6% (4)
  • D
    3% (2)

Explanation

Risk-rating rules are typically stored in Organizational Process Assets (OPAs), which include historical information, lessons learned repositories, risk databases, and policies from previous projects and the broader organization. The Risk Probability and Impact Matrix (A) is a tool used during qualitative risk analysis, not a source of the rules themselves. Enterprise Environmental Factors (C) are external conditions that influence the project. The Risk Management Plan (D) documents how risk processes will be conducted but refers to OPAs as the source for established risk-rating conventions.

Topics

#Risk Management#Organizational Process Assets#Project Management#Risk Assessment

Community Discussion

No community discussion yet for this question.

Full CAP Practice