Domain 3 - Analysis, Risk, and Decision-Making (scope unverified; validate against the official outline)
What to expect
The source for this domain returned no content. This is a placeholder rebuild around quantitative and risk reasoning, which appears in some form in most certification bodies' third domain. Verify the actual scope against the official outline before relying on it.
Concepts you must own
- Risk as likelihood × impact. Not every risk is worth mitigating; rank by expected exposure, not by how alarming the description sounds.
- Treatment options. Avoid, mitigate, transfer, accept. "Accept" is a legitimate answer, not a failure - but only when the owner is named and informed.
- Expected value. Multiply outcome by probability, sum across scenarios, and compare alternatives on the same basis.
- Root cause vs. symptom. Fixing the symptom is a distractor; the answer addresses the cause.
- Sunk cost. Money already spent is irrelevant to the forward-looking decision.
- Base rates. When the stem gives a prior probability and new evidence, update rather than discard the prior.
Traps that show up
- Biggest-number bias. The option with the largest raw impact is not always the highest exposure; low probability matters.
- Sunk-cost pull. Options that justify continuing because of prior spend are almost always wrong.
- Symptom-level fixes. Fast, satisfying, and incomplete.
- Unnamed ownership. "Accept the risk" without assigning an owner is an incomplete answer.
Rule of thumb
Multiply before you rank. Compute expected exposure for each option (probability × impact), then choose. If two options tie on exposure, prefer the one with the named owner and documented acceptance.
Worked example: Risk A: 10% chance of a 200k loss → 20k. Risk B: 60% chance of a 25k loss → 15k. Risk A ranks higher despite a smaller headline number. That single multiplication usually settles the question.
Review flag: domain scope unverified; re-check before publication.