Nancy is the project manager of the NHH project. She and the project team have identified
a significant risk in the project during the qualitative risk analysis process. Bob is familiar
with the technology that the risk is affecting and proposes to Nancy a solution to the risk
event. Nancy tells Bob that she has noted his response, but the risk really needs to pass
through the quantitative risk analysis process before creating responses. Bob disagrees and
ensures Nancy that his response is most appropriate for the identified risk. Who is correct in
this scenario?

A.
Bob is correct. Bob is familiar with the technology and the risk event so his
response should be implemented.

B.
Nancy is correct. Because Nancy is the project manager she can determine the
correct procedures for risk analysis and risk responses. In addition, she has noted the
risk response that Bob recommends.

C.
Nancy is correct. All risks of significant probability and impact should pass the
quantitative risk analysis process before risk responses are created.

D.
Bob is correct. Not all riskevents have to pass the quantitative risk analysis process
to develop effective risk responses.