Exam CRISC topic 1 question 642 discussion

Why not qualitative risk analysis? I think the answer should be D.

B. Determine if the scenarios need to be accepted or responded to. When new risk events are identified during a project, the next step should be to assess these risks to determine whether they need to be accepted (meaning no action is taken), or if a risk response plan should be developed and implemented. This assessment helps in deciding how to address these new risk events effectively. Continuing with a quantitative or qualitative risk analysis may be part of the process of assessing these new risks, but the initial step is to decide on a course of action based on their potential impact and likelihood. Recording the scenarios in the risk register is an important step but typically comes after the assessment and decision-making process.

We do not have enough information to decide if a quantitative or qualitative approach would be warranted. First action is to record the information, I believe. Selected D.

Maybe A

First record and assess the risk and then make a decision about it.

I would go for B. Risks identified during Project lifecycle don't need to be recorded in the Risk Register, so D is excluded.

Why not C? Qualitative analysis before Quantitative analysis?

risk action then risk register

A ought to be the wrong answer. D should be the correct answer and then it needs to be decided whether it is acceptable or needs to be responded on which is option B.