MENU
A bottom-up approach to developing I&T risk-related risk scenarios:
Suggested Answer: B
Get Premium IT Risk Fundamentals Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
A bottom-up approach to risk scenario development starts at the operational level. It involves those closest to the I&T functions---the people actually performing the work---developing scenarios based on their understanding of potential risks and vulnerabilities within their specific areas. These scenarios are then aggregated and analyzed at higher levels.
While anyone in the organization can contribute to risk identification (A), a bottom-up approach specifically relies on the expertise of those performing specific I&T functions (B). It should be used in conjunction with other approaches (C), such as top-down, for a comprehensive view.
21 comments · newest first
HO
Hortencia
2 days ago
Exactly, B captures the nuances of I&T functions.
RE
Reyes
7 days ago
A could lead to generic scenarios. We need specifics.
BA
Barney
12 days ago
B highlights practical insights from the team.
GE
Gearldine
17 days ago
C is definitely wrong. Combining methods is essential.
FA
Fabiola
23 days ago
A seems too broad. Not everyone understands risks deeply.
HO
Hortencia
28 days ago
I agree, B makes sense. Specific roles see unique risks.
BR
Brigette
1 month ago
I think B is the best choice. It focuses on real situations.
PA
Paris
1 month ago
Hypothetical situations are definitely important for I&T functions!
GI
Gilma
1 month ago
Wait, are we really saying it can't work with other approaches? That seems off.
BA
Barrett
2 months ago
I don't think it should be used alone; combining methods is key.
CA
Carman
2 months ago
Totally agree, it's great for getting diverse perspectives!
LO
Lorrie
2 months ago
A bottom-up approach lets everyone contribute to risk scenarios.
GL
Gladys
2 months ago
B is spot on, real scenarios come from real experiences!
FL
Florinda
2 months ago
Wait, so it’s just hypothetical? That sounds a bit risky to me.
LO
Lorrie
2 months ago
I’m not sure about option C, seems like combining methods could be beneficial.
DE
Delfina
3 months ago
Totally agree, it’s all about those on-the-ground insights!
ON
Oneida
3 months ago
A bottom-up approach involves input from all levels of the organization.
MI
Michal
3 months ago
I'm a bit confused about A; it sounds too broad, but I can't recall the exact details from our study materials.
RO
Rodney
3 months ago
I feel like we practiced a question similar to this, and I think we concluded that combining approaches is often beneficial, which makes C seem wrong.
RO
Rodrigo
3 months ago
I remember discussing how a bottom-up approach can involve multiple perspectives, so I don't think A is entirely accurate.
JE
Jesusa
4 months ago
I think the bottom-up approach is more about specific functions, so I lean towards option B, but I'm not entirely sure.