nerdexam
(ISC)2

CGRC · Question #390

Which of the following is not a part of Identify Risks process? Response:

The correct answer is C. Decision tree diagram. Decision tree diagrams are tools primarily used in risk analysis and response planning, not directly for the initial identification of risks.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following is not a part of Identify Risks process? Response:

Options

  • ASystem or process flow chart
  • BInfluence diagram
  • CDecision tree diagram
  • DCause and effect diagram

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    88% (35)
  • D
    3% (1)

Why each option

Decision tree diagrams are tools primarily used in risk analysis and response planning, not directly for the initial identification of risks.

ASystem or process flow chart

A system or process flow chart visually represents the steps and flow of a system or process, which is invaluable for identifying potential points of failure, vulnerabilities, or control gaps, thus aiding in risk identification.

BInfluence diagram

An influence diagram illustrates the relationships between variables, decisions, and objectives in a complex situation, helping to identify how different factors might impact outcomes and uncover potential risks.

CDecision tree diagramCorrect

Decision tree diagrams are analytical tools used to evaluate different decision paths, outcomes, and probabilities, typically applied during the 'Analyze Risks' or 'Plan Risk Responses' processes to choose the best course of action. They are used after risks have been identified and assessed, not as a primary method for discovering new risks.

DCause and effect diagram

A cause and effect diagram (e.g., Fishbone diagram) helps visualize potential causes for a specific problem or effect, systematically breaking down potential risk factors during the risk identification phase.

Concept tested: Risk identification tools and techniques

Source: https://www.pmi.org/pmbok-guide-standards/foundational/pmbok

Topics

#Risk Identification#Risk Management Tools#Diagramming Techniques

Community Discussion

No community discussion yet for this question.

Full CGRC Practice