Certified in Risk and Information Systems Control (CRISC) — Question 1397

Which of the following would be MOST helpful when estimating the likelihood of negative events?

Answer options

• A. Business impact analysis
• B. Cost-benefit analysis
• C. Risk response analysis
• D. Threat analysis

Correct answer: D

Explanation

The correct answer is D, Threat analysis, as it specifically focuses on identifying and evaluating potential threats that could lead to negative events. The other options, while useful in various contexts, do not primarily aim to estimate the likelihood of adverse occurrences like threat analysis does.