CompTIA SecurityX (CAS-005) CAS-005 — Question 64

The Chief Information Security Officer of a large multinational organization has asked the security risk manager to use risk scenarios during a risk analysis. Which of the following is the most likely reason for this approach?