Certified in Risk and Information Systems Control (CRISC) — Question 634

You are the risk official in Bluewell Inc. You are supposed to prioritize several risks. A risk has a rating for occurrence, severity, and detection as 4, 5, and 6, respectively. What Risk Priority Number (RPN) you would give to it?

Answer options

• A. 120
• B. 100
• C. 15
• D. 30

Correct answer: A

Explanation

The Risk Priority Number (RPN) is calculated by multiplying the ratings for occurrence, severity, and detection. In this case, 4 (occurrence) * 5 (severity) * 6 (detection) equals 120, making option A the correct answer. The other options do not reflect the correct multiplication of the given ratings.