Sammy is the project manager for her organization. She would like to rate each risk based
on its probability and affect on time, cost, and scope. Harry, a project team member, has
never done this before and thinks Sammy is wrong to attempt this approach. Harry says that
an accumulative risk score should be created, not three separate risk scores. Who is correct
in this scenario?

A.
Sammy is correct, because she is the project manager.

B.
Harry is correct, the risk probability and impact matrix is the only approach to risk
assessment.

C.
Harry is correct, because the risk probability and impact considers all objectives of
the project.

D.
Sammy is correct, because organizations can create risk scores for each objective
of the project.