Certified in Risk and Information Systems Control (CRISC) — Question 1237

You work as a project manager for BlueWell Inc. You are about to complete the quantitative risk analysis process for your project. You can use three available tools and techniques to complete this process. Which one of the following is NOT a tool or technique that is appropriate for the quantitative risk analysis process?

Answer options

• A. Data gathering and representation techniques
• B. Expert judgment
• C. Quantitative risk analysis and modeling techniques
• D. Organizational process assets

Correct answer: D

Explanation

The correct answer is D, as Organizational process assets are not specifically tools or techniques used in quantitative risk analysis. Options A, B, and C are all valid methods used to assess and analyze risks quantitatively.