Certified in Risk and Information Systems Control (CRISC) — Question 1055

Which of the following is the BEST method for discovering high-impact risk types?

Answer options

• A. Qualitative risk analysis
• B. Delphi technique
• C. Failure modes and effects analysis
• D. Quantitative risk analysis

Correct answer: C

Explanation

Failure modes and effects analysis (FMEA) is specifically designed to identify potential failure points in a process and assess their impact, making it the best choice for discovering high-impact risks. Qualitative and quantitative risk analyses are useful but do not focus solely on identifying high-impact risk types like FMEA does, while the Delphi technique is more about gathering expert opinions rather than direct analysis of risks.