Which term involves ranking risks based on potential impact to help prioritize mitigation actions?

Which term involves ranking risks based on potential impact to help prioritize mitigation actions?

• A. Risk Register
• B. Risk Mapping
• C. Risk Control
• D. Root Cause Analysis

Answer: (D)

This question tests how risks are prioritized by potential impact to guide mitigation actions. Risk mapping uses a matrix that combines how likely a risk is with how severe its impact would be, often shown as a heat map. This visual prioritization helps you focus on high-impact, higher-likelihood risks first and allocate resources accordingly. For example, a risk with large potential consequences but a moderate chance may rise to a higher priority than a small-impact issue that’s very unlikely, guiding where to put mitigations. The risk register is just a documented list of risks and their attributes, not the act of ranking by impact. Risk control refers to the actions taken to reduce risk, not the method of ranking. Root cause analysis digs into the underlying causes of a risk event, rather than systematically prioritizing risks by their potential impact.

This question tests how risks are prioritized by potential impact to guide mitigation actions. Risk mapping uses a matrix that combines how likely a risk is with how severe its impact would be, often shown as a heat map. This visual prioritization helps you focus on high-impact, higher-likelihood risks first and allocate resources accordingly. For example, a risk with large potential consequences but a moderate chance may rise to a higher priority than a small-impact issue that’s very unlikely, guiding where to put mitigations.

The risk register is just a documented list of risks and their attributes, not the act of ranking by impact. Risk control refers to the actions taken to reduce risk, not the method of ranking. Root cause analysis digs into the underlying causes of a risk event, rather than systematically prioritizing risks by their potential impact.