Question 1071 · 1449 in bank
Which of the following is MOST effective against external threats to an organization's confidential information?
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is MOST effective against external threats to an organization's confidential information?
Answer: B
Which of the following will BEST ensure that information security risk factors are mitigated when developing in-house applications?
Answer: C
Without a doubt: Tasks that determine the needs or conditions to meet a new or altered solution, accounting for multiple perspectives, e.g., balancing stakeholder needs and constraints, allocation of requirements to components, breaking down complex requirements to lower level requirements (CMMI).
Source: Adapted from community discussion — john_boogieman
A risk practitioner has identified that the organization's secondary data center does not provide redundancy for a critical application. Who should have the authority to accept the associated risk?
Answer: B
The GREATEST concern when maintaining a risk register is that:
Answer: B
Which of the following would BEST help an enterprise prioritize risk scenarios?
Answer: D
D. Placement on the risk map The risk map is a visual representation of risks that takes into account their likelihood and impact. By placing risk scenarios on a risk map, you can effectively prioritize them based on their relative positions. Risks that are positioned in the high-likelihood, high-impact quadrant are typically of the highest priority and should be addressed first. This approach allows for a clear and visual understanding of which risks require immediate attention and which can be addressed later.
Source: Adapted from community discussion — Staanlee
Which of the following is MOST useful when communicating risk to management?
Answer: B
Which of the following should be the PRIMARY input when designing IT controls?
Answer: A
Review and correct, reason: Internal and external risk reports should be the primary input when designing IT controls. These reports help identify the potential risks that may affect the organization's IT environment and provide insight into the types of controls that can be implemented to mitigate those risks. Control self-assessments can also provide valuable information, but they are typically more focused on evaluating the effectiveness of existing controls rather than designing new controls.
Source: Adapted from community discussion — john_boogieman
A control for mitigating risk in a key business area cannot be implemented immediately. Which of the following is the risk practitioner's BEST course of action when a compensating control needs to be applied?
Answer: B
A key risk indicator (KRI) is reported to senior management on a periodic basis as exceeding thresholds, but each time senior management has decided to take no action to reduce the risk. Which of the following is the MOST likely reason for senior management's response?
Answer: B
Which of the following should be the HIGHEST priority when developing a risk response?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1071. 1449 questions available.
Version 1.0.0. How we source questions