ISACA IT Risk Fundamentals — Question 3

A risk practitioner has been tasked with analyzing new risk events added to the risk register. Which of the following analysis methods would BEST enable the risk practitioner to minimize ambiguity and subjectivity?

Answer options

• A. Annual loss expectancy (ALE)
• B. Delphi method
• C. Brainstorming

Correct answer: B

Explanation

The Delphi method is effective for reducing ambiguity and subjectivity because it gathers expert opinions anonymously and iteratively, leading to a more objective consensus. In contrast, Annual loss expectancy (ALE) is a quantitative measure that does not specifically address subjective opinions, while brainstorming relies on open discussion, which can often be influenced by dominant voices and may not effectively minimize bias.