Certified in the Governance of Enterprise IT (CGEIT) — Question 168

In which of the following situations is it MOST appropriate to use a quantitative risk assessment?

Answer options

• A. The risk assessment is needed for an IT project business case
• B. The objectivity of the risk assessment is of primary importance
• C. The risk assessment needs to be completed in a short period of time
• D. There is a lack of accurate and reliable past and present risk data

Correct answer: B

Explanation

A quantitative risk assessment is primarily focused on objective measurements and numerical data, making it most appropriate when objectivity is crucial. While the other options may present valid contexts, they do not emphasize the need for objectivity as strongly as option B does.