CRISC Certified in Risk and Information Systems Control – Question156

Using which of the following one can produce comprehensive result while performing qualitative risk analysis?

A.
Scenarios with threats and impacts
B. Cost-benefit analysis
C. Value of information assets.
D. Vulnerability assessment

Correct Answer: A

Explanation:

Explanation:
Using list of possible scenarios with threats and impacts will better frame the range of risk and hence can frame more informative result of qualitative analysis.
Incorrect Answers:
B: Cost and benefit analysis is used for taking financial decisions that can be formal or informal, such as appraisal of any project or proposal. The approach weighs the total cost against the benefits expected, and then identifies the most profitable option. It only decides what type of control should be applied for effective risk management.
C, D: These are not sufficient for producing detailed result.