CRISC Certified in Risk and Information Systems Control – Question391

Which of the following methods involves the use of predictive or diagnostic analytical tool for exposing risk factors?

A.
Scenario analysis
B. Sensitivity analysis
C. Fault tree analysis
D. Cause and effect analysis

Correct Answer: D

Explanation:

Explanation: Cause-and-effect analysis involves the use of predictive or diagnostic analytical tool for exploring the root causes or factors that contribute to positive or negative effects or outcomes. These tools also help in identifying potential risk.
Incorrect Answers:
A: This analysis is not a method for exposing risk factors. It is used for analyzing scenarios.
B: Sensitivity analysis is the quantitative risk analysis technique that:

  • Assist in determination of risk factors that have the most potential impact
  • Examines the extent to which the uncertainty of each element affects the object under consideration when all other uncertain elements are held at their baseline values

C: Fault tree analysis (FIA) is a technique that provides a systematic description of the combination of possible occurrences in a system, which can result in an undesirable outcome. It combines hardware failures and human failures.