Multiple Choice
Nancy is the project manager of the NHH project. She and the project team have identified a significant risk in the project during the qualitative risk analysis process. Bob is familiar with the technology that the risk is affecting and proposes to Nancy a solution to the risk event. Nancy tells Bob that she has noted his response, but the risk really needs to pass through the quantitative risk analysis process before creating responses. Bob disagrees and ensures Nancy that his response is most appropriate for the identified risk. Who is correct in this scenario?
A) Bob is correct. Bob is familiar with the technology and the risk event so his response should be implemented.
B) Nancy is correct. Because Nancy is the project manager she can determine the correct procedures for risk analysis and risk responses. In addition, she has noted the risk response that Bob recommends.
C) Nancy is correct. All risks of significant probability and impact should pass the quantitative risk analysis process before risk responses are created.
D) Bob is correct. Not all risk events have to pass the quantitative risk analysis process to develop effective risk responses.
Correct Answer:

Verified
Correct Answer:
Verified
Q131: Which of the following is used to
Q132: The Information System Security Officer (ISSO) and
Q133: The National Information Assurance Certification and Accreditation
Q134: DIACAP applies to the acquisition, operation, and
Q135: Which of the following access control models
Q137: Which of the following statements correctly describes
Q138: Which of the following professionals plays the
Q139: Which of the following individuals makes the
Q140: Which of the following DITSCAP C&A phases
Q141: The National Information Assurance Certification and Accreditation