CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ102

VerifiedSecure Software Lifecycle Management

You are the project manager for the CUL project in your organization. You and the project team are evaluating risk events and developing a probability-and-impact matrix for the identified risks. Which of the following statements best describes the data-type requirements used in qualitative risk analysis?

Explanation

Credible qualitative risk analysis depends on accurate, unbiased inputs when assessing each risk’s probability and impact. Biased information can distort risk prioritization and lead to inappropriate response decisions. PMI guidance on risk-assessment data emphasizes collecting information that is as accurate and free of bias as possible.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!