Question 1051 · 1449 in bank
Which of the following key risk indicators (KRIs) is MOST effective for monitoring risk related to a bring your own device (BYOD) program?
Show answer
Answer: A
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following key risk indicators (KRIs) is MOST effective for monitoring risk related to a bring your own device (BYOD) program?
Answer: A
The PRIMARY benefit of maintaining an up-to-date risk register is that it helps to:
Answer: B
Which of the following is the MOST relevant input to an organization's risk profile?
Answer: B
The annualized loss expectancy (ALE) method of risk analysis:
Answer: D
Agree that it is D. ALE is specifically helpful in calculating cost benefit. If the control's annual cost is greater than or equal to the ALE, it may not make sense to implement it.
Source: Adapted from community discussion — CbtL
An organization delegates its data processing to the internal IT team to manage information through its applications. Which of the following is the role of the internal IT team in this situation?
Answer: B
The key is to note the statement "internal IT team to manage information through its applications" The data custodian is an individual(s) or department(s) responsible for the storage and safe guarding of computerized data. Since the question is about Managing the information, the solution should be Data Custodian. Happy to hear from other experts.
Source: Adapted from community discussion — maheshexam
An organization is planning to engage a cloud-based service provider for some of its data-intensive business processes. Which of the following is MOST important to help define the IT risk associated with this outsourcing activity?
Answer: D
Option A is correct as SLA contains the scope of services between both parties and include other clauses such as right to audit, Information security clauses, performace metrics and service review.
Source: Adapted from community discussion — sleekygurl
Which of following is NOT used for measurement of Critical Success Factors of the project?
Answer: C
Incorrect Answers: A, B, D: Productivity, quality and customer service are used for evaluating critical service factor of any particular project.
An application owner has specified the acceptable downtime in the event of an incident to be much lower than the actual time required for the response team to recover the application. Which of the following should be the NEXT course of action?
Answer: C
the application of a measure should be based on a cost-benefit analysis, it may end up being to implement redundant infrastructure or not.
Source: Adapted from community discussion — john_boogieman
Which of the following would BEST help to ensure that identified risk is efficiently managed?
Answer: D
After identifying new risk events during a project, the project manager's NEXT step should be to:
Answer: D
We do not have enough information to decide if a quantitative or qualitative approach would be warranted. First action is to record the information, I believe. Selected D.
Source: Adapted from community discussion — CbtL
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1051. 1449 questions available.
Version 1.0.0. How we source questions