nerdexam
(ISC)2

CGRC · Question #148

You are preparing to start the qualitative risk analysis process for your project. You will be relying on some organizational process assets to influence the process. Which one of the following is NOT

The correct answer is B. Review of vendor contracts to examine risks in past projects. Organizational Process Assets (OPAs) include an organization's plans, processes, policies, procedures, and knowledge bases like historical information and risk databases. Vendor contracts, while containing useful information, are typically specific project documents rather than g

Security and Privacy Governance, Risk Management, and Compliance Program

Question

You are preparing to start the qualitative risk analysis process for your project. You will be relying on some organizational process assets to influence the process. Which one of the following is NOT a probable reason for relying on organizational process assets as an input for qualitative risk analysis? Response:

Options

  • AInformation on prior, similar projects
  • BReview of vendor contracts to examine risks in past projects
  • CRisk databases that may be available from industry sources
  • DStudies of similar projects by risk specialists

How the community answered

(31 responses)
  • A
    10% (3)
  • B
    84% (26)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Organizational Process Assets (OPAs) include an organization's plans, processes, policies, procedures, and knowledge bases like historical information and risk databases. Vendor contracts, while containing useful information, are typically specific project documents rather than general organizational process assets.

AInformation on prior, similar projects

Information on prior, similar projects is a direct example of historical information, which is a key component of organizational process assets used in qualitative risk analysis.

BReview of vendor contracts to examine risks in past projectsCorrect

Reviewing vendor contracts to examine risks in past projects is typically an analysis of specific project documents (contracts) rather than a direct reliance on an organizational process asset (OPA) as defined in project management. While contracts contain valuable risk information, OPAs generally refer to organizational plans, processes, policies, procedures, and knowledge bases like lessons learned or risk databases, not individual project agreements.

CRisk databases that may be available from industry sources

Risk databases that an organization maintains, potentially incorporating industry sources, are considered part of the organization's knowledge base and thus organizational process assets.

DStudies of similar projects by risk specialists

Studies of similar projects by risk specialists contribute to the organization's knowledge base and historical information, making them organizational process assets.

Concept tested: Project Management - Organizational Process Assets (OPAs)

Source: https://www.pmi.org/pmbok-guide-standards/foundational/pmbok

Topics

#Qualitative Risk Analysis#Organizational Process Assets (OPAs)#Risk Management Processes#Project Inputs

Community Discussion

No community discussion yet for this question.

Full CGRC Practice