ITPEC IP April 2022 Question 71
ITPEC IP April 2022 — Question 71 of 100
Risk assessment consists of risk identification, risk analysis, and risk evaluation. Identification determines what risks exist. Analysis estimates their likelihood, consequences, and level. Evaluation compares the analyzed level with criteria to decide which risks need treatment and their priority.
Answer (d)
Why not others:
- risk transfer, avoidance, and reduction are treatment options selected after assessment
- they change ownership, exposure, likelihood, or impact rather than determine the assessed risk level
Key rule: Assessment identifies, analyzes, and evaluates risks; treatment then avoids, reduces, transfers, or accepts them.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.