IT-RISK-FUNDAMENTALS practice question 4 of 15
Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?
Full set: 75 questionsThe Delphi technique is a structured forecasting and communication method that relies on a panel of experts. It involves multiple rounds of anonymous questionnaires to gather information and build a reliable consensus. In each round, a facilitator provides a summary of the previous round's results, allowing experts to review and revise their judgments based on the group's collective input. This iterative process of gathering, validating, and ranking ideas from individuals to form a group position aligns perfectly with the scenario described.
A. A brainstorming model is a less structured group creativity technique focused on generating a large volume of ideas, not on the systematic validation and ranking described.
C. Monte Carlo analysis is a quantitative simulation technique used to model the probability of different outcomes; it does not involve gathering ideas from people.
1. Rowe, G., & Wright, G. (1999). The Delphi technique as a forecasting tool: issues and analysis. International Journal of Forecasting, 15(4), 353-375. https://doi.org/10.1016/S0169-2070(99)00018-7. This paper describes the Delphi technique's structured, iterative process involving expert feedback.
2. ISACA. (2020). IT Risk Fundamentals Study Guide. Section 2.2, Risk Identification Methods. The guide discusses various methods, including the Delphi technique, for soliciting expert opinion in a structured manner to identify and assess risk.
3. Purdue University. (n.d.). The Delphi Method. Office of the Provost, Institutional Data Analytics + Assessment (IDA+A). Describes the technique as a multi-round survey of experts to achieve consensus.
Keep practicing
Take the free IT-RISK-FUNDAMENTALS practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other IT-RISK-FUNDAMENTALS practice questions
- Question 1What is the purpose of a control objective?
- Question 2What is the basis for determining the sensitivity of an IT asset?
- Question 3Which of the following is the objective of a frequency analysis?
- Question 5Which of the following is MOST likely to expose an organization to adverse threats?
- Question 6One of the PRIMARY purposes of threat intelligence is to understand:
- Question 7Which of the following is considered an exploit event?
