Certified in Risk and Information Systems Control (CRISC) — Question 309

Using which of the following one can produce comprehensive result while performing qualitative risk analysis?

Answer options

• A. Scenarios with threats and impacts
• B. Cost-benefit analysis
• C. Value of information assets.
• D. Vulnerability assessment

Correct answer: A

Explanation

The correct answer is A, as scenarios detailing threats and impacts are essential for understanding potential risks in qualitative analysis. Options B, C, and D do not provide the necessary context for assessing risks qualitatively, as they focus on financial analysis, asset value, and vulnerabilities respectively.