CGEIT · Question #386
In which of the following situations is it MOST appropriate to use a quantitative risk assessment?
The correct answer is C. The objectivity of the risk assessment is of primary importance.. A quantitative risk assessment is most suitable when an objective, numerical evaluation of risk is paramount, as it uses data to assign monetary values and probabilities to risks. This method provides concrete figures for potential losses, which enhances the objectivity of the as
Question
In which of the following situations is it MOST appropriate to use a quantitative risk assessment?
Options
- AThere is a lack of accurate and reliable past and present risk data.
- BThe risk assessment needs to be completed in a short period of time.
- CThe objectivity of the risk assessment is of primary importance.
- DThe risk assessment is needed for an IT project business case.
How the community answered
(38 responses)- B5% (2)
- C92% (35)
- D3% (1)
Why each option
A quantitative risk assessment is most suitable when an objective, numerical evaluation of risk is paramount, as it uses data to assign monetary values and probabilities to risks. This method provides concrete figures for potential losses, which enhances the objectivity of the assessment.
Quantitative risk assessments *require* accurate and reliable data to be effective, so a lack thereof makes it inappropriate.
Quantitative risk assessments are typically more time-consuming than qualitative assessments due to the data collection and complex calculations involved.
Quantitative risk assessment focuses on assigning numerical values (e.g., monetary cost, probability) to risks, which inherently increases its objectivity. This method provides a data-driven, measurable analysis, making it ideal when a clear, unbiased understanding of potential financial impact or likelihood is required for decision-making.
While risk assessments are part of a business case, a qualitative assessment might be sufficient or even preferred for a quick overview, whereas quantitative is for detailed objective analysis.
Concept tested: Quantitative risk assessment application
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/risk-assessment
Topics
Community Discussion
No community discussion yet for this question.