Question 1061 · 1449 in bank
An organization has outsourced its IT security operations to a third party. Who is ULTIMATELY accountable for the risk associated with the outsourced operations?
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
An organization has outsourced its IT security operations to a third party. Who is ULTIMATELY accountable for the risk associated with the outsourced operations?
Answer: B
IT management has asked for a consolidated view into the organization's risk profile to enable project prioritization and resource allocation. Which of the following materials would be MOST helpful?
Answer: C
In an organization dependent on data analytics to drive decision-making, which of the following would BEST help to minimize the risk associated with inaccurate data?
Answer: A
Which of the following is the MOST important consideration when multiple risk practitioners capture risk scenarios in a single risk register?
Answer: A
Which of the following approaches will BEST help to ensure the effectiveness of risk awareness training?
Answer: D
Which of the following changes would be reflected in an organization's risk profile after the failure of a critical patch implementation?
Answer: D
Inherent Risk not impacted with Patch activity fail in my opinion, only residual risk impact in patching either it will inside the risk apatite of organization or will increase. So I will still go with D
Source: Adapted from community discussion — Raj1510
Which of the following is the GREATEST benefit of analyzing logs collected from different systems?
Answer: C
Collecting logs from different systems will have benefit of keeping a record of incidents. However, ANALYZING the logs will help identify the security variolations so the answer is C.
Source: Adapted from community discussion — hussmohsin
Which of the following is the MOST useful indicator to measure the efficiency of an identity and access management process?
Answer: A
When developing a new risk register, a risk practitioner should focus on which of the following risk management activities?
Answer: B
The head of a business operations department asks to review the entire IT risk register. Which of the following would be the risk manager's BEST approach to this request before sharing the register?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1061. 1449 questions available.
Version 1.0.0. How we source questions