Which of the following is the MOST appropriate key risk indicator (KRI) for backup media that is recycled monthly?A . Time required for backup restoration testing.B . Change in size of data backed up.C...
Which of the following would BEST mitigate the risk associated with reputational damage from inappropriate use of social media sites by employees?A . Disabling social media access from the organization’s technologyB . Validating employee...
What is the PRIMARY need for effectively assessing controls?A . Control's alignment with operating environmentB . Control's design effectivenessC . Control's objective achievementD . Control's operating effectivenessView AnswerAnswer: C Explanation: Controls can be effectively...
An organization has detected unauthorized logins to its client database servers. Which of the following should be of GREATEST concern?A . Potential increase in regulatory scrutinyB . Potential theft of personal informationC . Potential...
Calculation of the recovery time objective (RTO) is necessary to determine the:A . annual loss expectancy (ALE).B . priority of restoration.C . point of synchronization.D . time required to restore files.View AnswerAnswer: D
Which of the following is the MOST effective inhibitor of relevant and efficient communication?A . A false sense of confidence at the top on the degree of actual exposure related to IT and lack...
Which of the following should be the PRIMARY focus of a risk owner once a decision is made to mitigate a risk?A . Determining processes for monitoring the effectiveness of the controlsB . Confirming...
A PRIMARY function of the risk register is to provide supporting information for the development of an organization’s risk:A . map.B . process.C . profile.D . strategy.View AnswerAnswer: C
Which of the following should be included in a risk scenario to be used for risk analysis?A . Residual riskB . Risk toleranceC . Risk appetiteD . Threat typeView AnswerAnswer: D
Which of the following criteria associated with key risk indicators (KRIs) BEST enables effective risk monitoring?A . Use of industry risk data sourcesB . Sensitivity to changes in risk levelsC . Low cost of...
