CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ37

Secure Software Lifecycle Management

You and your project team have identified the project risks and are now analyzing their probability and impact. What type of risk analysis provides a quick, high-level review of each identified risk event?

  • A Quantitative risk analysis
  • B Qualitative risk analysis
  • C Seven risk responses
  • D A risk probability-impact matrix
Explanation

Qualitative risk analysis rapidly evaluates identified risks by their probability of occurrence and potential impact so they can be prioritized for further action. A probability-impact matrix is one technique used within qualitative risk analysis.

Community Discussion

No comments yet. Be the first to start the discussion!