Certified Authorization Professional – CAP – Question087

Jeff, a key stakeholder in your project, wants to know how the risk exposure for the risk events is calculated during quantitative risk analysis. He is worried about the risk exposure which is too low for the events surrounding his project requirements. How is the risk exposure calculated?

A.
The probability of a risk event plus the impact of a risk event determines the true risk expo sure.
B. The risk exposure of a risk event is determined by historical information.
C. The probability of a risk event times the impact of a risk event determines the true risk exposure.
D. The probability and impact of a risk event are gauged based on research and in-depth analysis.

Correct Answer: C