RA Step 2 Task 4 (assessing inputs) is described as selecting the analytic approach and models for the assessment. Which option correctly identifies this task?

• A. Risk models and analytic approach
• B. Threat events
• C. Information sources
• D. Stakeholder approvals

Answer: (A)

Assessing inputs is about deciding how you will analyze the data you collect. It means selecting the analytic approach (for example, qualitative, semi-quantitative, or quantitative methods) and the specific risk models or calculations you will apply to turn those inputs into an assessment. That focus on the method and tools for analysis is why identifying risk models and the analytic approach is the correct fit. The other options refer to items you might gather or consider (threat events, information sources) or governance steps (stakeholder approvals), not the way you analyze the data itself.