CRISC Certified in Risk and Information Systems Control – Question384

Which of the following is NOT the method of Qualitative risk analysis?

A.
Scorecards
B. Attribute analysis
C. Likelihood-impact matrix
D. Business process modeling (BPM) and simulation

Correct Answer: D

Explanation:

Explanation:
Business process modeling (BPM) and simulation is a method of Quantitative risk analysis and not Qualitative risk analysis.
The BPM and simulation discipline is an effective method of identifying and quantifying the operational risk in enterprise business processes. It improves business process efficiency and effectiveness.
Incorrect Answers: A, B, C: These three are the methods of Qualitative risk analysis.