Question 1081 · 1449 in bank
Risk mitigation procedures should include:
Show answer
Answer: C
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Risk mitigation procedures should include:
Answer: C
Management has noticed storage costs have increased exponentially over the last 10 years because most users do not delete their emails. Which of the following can BEST alleviate this issue while not sacrificing security?
Answer: C
Which of the following would be the BEST key performance indicator (KPI) for monitoring the effectiveness of the IT asset management process?
Answer: D
The MAIN purpose of having a documented risk profile is to:
Answer: A
Which of the following is the MOST important foundational element of an effective three lines of defense model for an organization?
Answer: D
Which of the following would provide the BEST guidance when selecting an appropriate risk treatment plan?
Answer: C
Which of the following is MOST critical to the design of relevant risk scenarios?
Answer: A
Which of the following will BEST mitigate the risk associated with IT and business misalignment?
Answer: C
Effective risk management depends on knowledge of the goals and objectives of the organization, the best form of alignment of those indicated is to involve the business owner in the IT strategy.
Source: Adapted from community discussion — john_boogieman
Which of the following issues should be of GREATEST concern when evaluating existing controls during a risk assessment?
Answer: D
D. Successive assessments have the same recurring vulnerabilities. When evaluating existing controls during a risk assessment, the greatest concern should be recurring vulnerabilities. This indicates that the controls in place are not effectively mitigating the identified risks. It suggests that there may be fundamental weaknesses in the control environment, and these vulnerabilities continue to pose a threat to the organization. Recurring vulnerabilities can be a sign of various issues, including control ineffectiveness, inadequate risk response planning, or insufficient monitoring and improvement of controls over time. Addressing these recurring vulnerabilities should be a top priority to enhance the organization's security posture and reduce the associated risks. It's essential to identify the root causes of these vulnerabilities and take corrective actions to prevent them from reoccurring.
Source: Adapted from community discussion — Staanlee
An IT risk practitioner has determined that mitigation activities differ from an approved risk action plan. Which of the following is the risk practitioner's BEST course of action?
Answer: B
Why C??? Report to the CRO? That’s extreme for the first step. I think u should validate to see if plan worked. B. Validate the adequacy of the implemented risk mitigation measures
Source: Adapted from community discussion — SkipC
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1081. 1449 questions available.
Version 1.0.0. How we source questions