Certified in Risk and Information Systems Control (CRISC) — Question 28

Which of the following techniques would be used during a risk assessment to demonstrate to stakeholders that all known alternatives were evaluated?

Answer options

• A. Control chart
• B. Trend analysis
• C. Sensitivity analysis
• D. Decision tree

Correct answer: D

Explanation

The correct answer is D, as a Decision tree visually represents different alternatives and their potential outcomes, making it clear to stakeholders that all options were assessed. The other options, while useful in risk analysis, do not specifically provide a comprehensive evaluation of all alternatives like a Decision tree does.