CRISC Certified in Risk and Information Systems Control – Question091 - CRISC Certified in Risk and Information Systems Control

You have been assigned as the Project Manager for a new project that involves development of a new interface for your existing time management system. You have completed identifying all possible risks along with the stakeholders and team and have calculated the probability and impact of these risks. Which of the following would you need next to help you prioritize the risks?

A. Affinity Diagram
B. Risk rating rules
C. Project Network Diagram
D. Risk categories

Correct Answer: B

Explanation:

Explanation: Risk rating rules define how to prioritize risks after the related probability and impact values are calculated. These are generally included in the organizational process assets and are refined for individual projects.
Incorrect Answers:
A: Affinity Diagram is a method of group creativity technique to collect requirements which allows large numbers of ideas to be sorted into groups for review and analysis. This is generally used in Scope Management and not applicable to this option.
C: A Project Network diagram shows the sequencing and linkage between various project tasks and is not applicable to this question
D: Risk categories are an output of the Perform Qualitative Risk Analysis process and not a tool to complete the process.