Certified in Risk and Information Systems Control (CRISC) — Question 135

There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to quantitative risk analysis process?

Answer options

• A. Risk management plan
• B. Enterprise environmental factors
• C. Cost management plan
• D. Risk register

Correct answer: B

Explanation

The correct answer is B, as Enterprise environmental factors are not a direct input in the quantitative risk analysis process. The other options, including the Risk management plan, Cost management plan, and Risk register, are essential inputs that provide necessary information for the analysis.