24 Risk management is a global process that includes various aspects, namely (1) risk identification, risk assessment and risk treatment (2) risk identification, risk analysis and risk evaluation (3) risk identification, risk evaluation and risk control (4) risk identification, risk finance and risk control B!d jould polidwog 25 Which of the following risk analysis methodologies are outlined in IS031010? (1) qualitative, semi-quantitative and quantitative (2) qualitative, semi-qualitative and quantitative (3) event tree, cause and effects and decision-tree analysis (4) root-cause, scenario and cost/benefit analysis. 26. Which of the following alternatives relates to a simple inductive method of analysis whose objective is to identify the hazards and hazardous situations and events that can cause harm to a given activity, facility or system? (1) Delphi technique (2) So-what-if technique (3) root cause analysis (4) preliminary hazard analysis 27 Which one of the following alternatives refers to the content of ISO 19011 (2011)? (1) explanation of the principles of auditing, advice on the competence of auditors, guidelines on managing audits and guidance on the conduct of system audits (2) explanation of the principles of accounting, advice on the qualifications and experience of auditors, guidelines on managing audits and guidance on the conduct of system audits (3) explanation of the principles of auditing, advice on the competence and evaluation of auditors, guidelines on managing audits and guidance on the conduct of system audits (4) requirements of a quality management system, principles of auditing, the management of quality and guidance on the conduct of system audits