Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following tools is MOST effective in identifying trends in the IT risk profile?
Answer: A
A risk map is a visual to show the risk significant vs. likelihood . How can this display a trend? The answer should be A> Dashboard.
Source: Adapted from community discussion — PGopinath
After undertaking a risk assessment of a production system, the MOST appropriate action is for the risk manager to:
Answer: B
A newly hired risk practitioner finds that the risk register has not been updated in the past year. What is the risk practitioner's BEST course of action?
Answer: C
Reviewing results from which of the following is the BEST way to identify information systems control deficiencies?
Answer: A
this its A only. question is how to assess the information system Control deficiency. that is best by a self assessment of control.
Source: Adapted from community discussion — huze
Which of the following role carriers is accounted for analyzing risks, maintaining risk profile, and risk-aware decisions?
Answer: A
Chief Risk Officer (CRO): roles and responsabilities 1. Risk Strategy: Develops and oversees the overall risk management strategy and framework for the organization. 2. Risk Analysis: Conducts comprehensive risk assessments and analyses to identify, evaluate, and prioritize risks across the organization. 3. Risk Profile Maintenance: Maintains the organization's risk profile, ensuring it is up-to-date and reflective of the current risk landscape. 4. Risk-Aware Decisions: Promotes risk-aware decision-making at the executive level, ensuring that strategic decisions consider potential risks and their impacts. 5. Risk Governance: Establishes risk governance structures and processes, ensuring compliance with regulatory requirements and industry standards. 6. Risk Reporting: Provides regular risk reports to the board of directors, executive management, and other key stakeholders, highlighting significant risks and mitigation efforts. Therefore, D is the correct answer.
Source: Adapted from community discussion — jorigene
Which of the following would prompt changes in key risk indicator (KRI) thresholds?
Answer: A
Which of the following is MOST important for a risk practitioner to provide to the internal audit department during the audit planning process?
Answer: B
Which of the following provides the BEST evidence of the effectiveness of an organization's account provisioning process?
Answer: C
User provisioning is an identity management process that ensures user accounts are created, given proper permissions, changed, disabled, and deleted. Role-based access controls (RBAC) is only one part of user provisioning. An Entitlement reviews is a review of user access permissions and other rights and is the best evidence of the effectiveness of the process.
Source: Adapted from community discussion — john_boogieman
A risk heat map is MOST commonly used as part of an IT risk analysis to facilitate risk:
Answer: C
When a risk heat map is used to represent results of an assessment. Not sure how it facilitate the risk assessment itself. You can complete a risk assessment then use the results to create a heat map. Which can quickly communicate key risk to the organization.
Source: Adapted from community discussion — thedood
A risk practitioner has been asked to advise management on developing a log collection and correlation strategy. Which of the following should be the MOST important consideration when developing this strategy?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1001. 1449 questions available.
Version 1.0.0. How we source questions