Section: Volume A
Explanation:
Risk rating rules define how to prioritize risks after the related probability and impact values are calculated.
These are generally included in the organizational process assets and are refined for individual projects.
Incorrect Answers:
A: Affinity Diagram is a method of group creativity technique to collect requirements which allows large numbers of ideas to be sorted into groups for review and analysis. This is generally used in Scope Management and not applicable to this option.
C: A Project Network diagram shows the sequencing and linkage between various project tasks and is not applicable to this question D: Risk categories are an output of the Perform Qualitative Risk Analysis process and not a tool to complete the process.

Explanation/Reference:
Explanation:
Data validation ensures that extracted data are ready for analysis. One objective is to perform data quality tests to ensure data are valid complete and free of errors. This may also involve making data from different sources suitable for comparative analysis.
Incorrect Answers:
A: Analysis of data involves simple set of steps or complex combination of commands and other functionality. Data analysis is designed in such a way to achieve the stated objectives from the project plan. Although this may be applicable to any monitoring activity, it would be beneficial to consider transferability and scalability. This may include robust documentation, use of software development standards and naming conventions.
C: Data gathering is the process of collecting data on risk to be monitored, prepare a detailed plan and define the project's scope. In the case of a monitoring project, this step should involve process owners, data owners, system custodians and other process stakeholders.
D: In the data access process, management identifies which data are available and how they can be acquired in a format that can be used for analysis. There are two options for data extraction:
Extracting data directly from the source systems after system owner approval

Receiving data extracts from the system custodian (IT) after system owner approval

A maturity model is a tool that assesses the level of development and performance of key processes within an organization. A maturity model typically defines a set of criteria, standards, and best practices for each process, and assigns a rating or score based on the degree of compliance or achievement. A maturity model can help compare the current state of key processes to their desired state, by identifying the strengths, weaknesses, gaps, and opportunities for improvement. A maturity model can also help establish a roadmap for process improvement, by setting realistic and measurable goals and objectives, and monitoring the progress and results. References = Risk and Information Systems Control Study Manual, Chapter 1: IT Risk Identification, Section 1.4: IT Risk Scenarios, p. 49-50.