GAQM ISO-31000-CLA Exam - Topic 4 Question 5 Discussion

Actual exam question for GAQM's ISO-31000-CLA exam

Question #: 5
Topic #: 4

Which step is the last part of the risk assessment process, which started with risk identification then moved to risk assessment, and finally risk evaluation?

ARisk evaluation

BRisk outsourcing

CRisk acceptance

DRisk avoidance

Show Suggested Answer

Suggested Answer: A

the last step of the risk assessment process, which starts with risk identification, moves to risk assessment, and finally risk evaluation, is Risk evaluation.

Risk evaluation involves comparing the estimated level of risk against the risk criteria established during the risk assessment phase, to determine the significance of the risk and whether it is acceptable or not. This decision is made in consultation with stakeholders, who may provide additional context and information to inform the decision.

The American Society for Quality (ASQ) describes risk evaluation as 'the process of comparing an estimated risk against given risk criteria to determine the acceptability of the risk.' [1]

Similarly, ISO/IEC 27001:2013 (Information technology --- Security techniques --- Information security management systems --- Requirements) defines risk evaluation as 'the process of comparing the estimated risk against given risk criteria in order to determine the significance of the risk.' [2]

by Glenna at Nov 17, 2024, 03:55 AM

Limited Time Offer

25%

Off

Get Premium ISO-31000-CLA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annabelle

3 months ago

Just to clarify, risk evaluation comes after assessment.

upvoted 0 times

...

Omer

3 months ago

I thought risk avoidance was the final step.

upvoted 0 times

...

Amira

3 months ago

Wait, isn't risk acceptance also a part of it?

upvoted 0 times

...

Rodolfo

4 months ago

Totally agree, that's the last step.

upvoted 0 times

...

Catrice

4 months ago

It's definitely risk evaluation!

upvoted 0 times

...

Jarod

4 months ago

I feel like risk avoidance could be a trick answer here. But I think we discussed that it’s more about strategies than the assessment process itself.

upvoted 0 times

...

Deja

4 months ago

I’m pretty confident that risk evaluation is the last part. It’s the one that wraps everything up, right?

upvoted 0 times

...

Tayna

4 months ago

I remember practicing a question like this, and I think risk acceptance was mentioned as a final step. But I could be mixing it up.

upvoted 0 times

...

Karol

5 months ago

I think the last step is risk evaluation, but I'm not entirely sure. It seems like it would make sense to evaluate after assessing.

upvoted 0 times

...

Mozell

5 months ago

I think the answer is risk acceptance. That's the final step where you decide how to respond to the risks you've identified and assessed, right?

upvoted 0 times

...

Moon

5 months ago

The last step is definitely risk evaluation. That's where you analyze the identified risks and determine how to handle them, whether through acceptance, avoidance, or some other approach.

upvoted 0 times

...

Wilda

5 months ago

Hmm, I'm a bit confused on this one. I know the risk assessment process has multiple steps, but I can't quite remember the exact order. I'll have to think this through carefully.

upvoted 0 times

...

Sheron

5 months ago

I'm pretty sure the last step is risk evaluation, since the question mentions the risk assessment process starting with risk identification and then moving to risk assessment.

upvoted 0 times

...

Irene

1 year ago

Haha, I bet the risk assessors are having a risky time with this one! But I'll go with C) Risk acceptance too.

upvoted 0 times

Vonda

1 year ago

No, I'm pretty sure it's C) Risk acceptance. That's the final step.

upvoted 0 times

...

Reita

1 year ago

I'm not so sure, maybe it's A) Risk evaluation?

upvoted 0 times

...

Lazaro

1 year ago

Yeah, I agree. It's important to accept the risks after assessing them.

upvoted 0 times

...

Alberta

1 year ago

I think C) Risk acceptance is the last step.

upvoted 0 times

...

Evette

1 year ago

I'm going with C) Risk acceptance. It makes the most sense as the final step in the risk assessment workflow.

upvoted 0 times

Dominga

1 year ago

I think so too. It's important to accept and manage the risks identified.

upvoted 0 times

...

Cassi

1 year ago

I agree, C) Risk acceptance seems like the logical final step in the process.

upvoted 0 times

...

Lashaunda

1 year ago

Definitely C) Risk acceptance. That's the logical conclusion of the risk assessment process.

upvoted 0 times

Avery

1 year ago

Risk outsourcing could be an option, but ultimately it comes down to accepting the risks.

upvoted 0 times

...

Kanisha

1 year ago

Risk avoidance may not always be possible, so accepting the risks is often the best option.

upvoted 0 times

...

Denna

1 year ago

It makes sense to accept the risks once they have been identified and assessed.

upvoted 0 times

...

Lezlie

1 year ago

I agree, C) Risk acceptance is the last step in the risk assessment process.

upvoted 0 times

...

Kallie

1 year ago

I'm not sure, but I think it could also be risk acceptance because that's when you decide if the risk is worth taking.

upvoted 0 times

...

Marge

1 year ago

I agree with Sarah, risk evaluation makes sense as the final step.

upvoted 0 times

...

Lili

1 year ago

I think the answer is C) Risk acceptance. After identifying and assessing the risks, the final step is to determine which risks to accept and manage.

upvoted 0 times

Monte

1 year ago

Yes, it's crucial to have a clear plan for managing accepted risks.

upvoted 0 times

...

Sommer

1 year ago

I think it's important to carefully consider each risk before accepting it.

upvoted 0 times

...

Lyla

1 year ago

That makes sense, we need to decide which risks to accept.

upvoted 0 times

...

Dorcas

1 year ago

I agree, the last step is C) Risk acceptance.

upvoted 0 times

...

Sarah

1 year ago

I think the last step is risk evaluation.

upvoted 0 times

...