CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ108

VerifiedRisk Management

Your project has several risks that could cause a serious financial impact if they occur. You have examined the risk events and developed some possible risk responses for them, but management wants you to do more. They want you to create a chart that identifies each risk event’s probability and impact, including a financial amount. What is the likely outcome of creating this type of chart?

Explanation

Quantitative risk analysis assigns numerical values to risk probability and impact, including monetary impacts, to quantify each risk’s exposure. A contingency reserve may be determined from that analysis, but it is not the immediate result of creating the probability-and-financial-impact chart.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!