Question 1211 · 1449 in bank
Which of the following would be of GREATEST assistance when justifying investment in risk response strategies?
Show answer
Answer: A
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following would be of GREATEST assistance when justifying investment in risk response strategies?
Answer: A
Which of the following is the MOST important consideration when determining whether to accept residual risk after security controls have been implemented on a critical system?
Answer: B
ALE determine total maximum amount can be expended to mitigate particular risk. Residual risk (Threats × vulnerability × asset value) × controls gap . Once mitigation of risk performed remaining risk compare against ALE. so will go with C as right answer. If question have talk about additional mitigation we may be consider B.
Source: Adapted from community discussion — Raj1510
Harry is the project manager of HDW project. He has identified a risk that could injure project team members. He does not want to accept any risk where someone could become injured on this project so he hires a professional vendor to complete this portion of the project work. What type of risk response is Harry implementing?
Answer: A
This is transferring, this is not mitigating weather employee or vendor the risk is still there , the manager just transferred it to the external vendor .
Source: Adapted from community discussion — ldl
The BEST criteria when selecting a risk response is the:
Answer: A
The BEST indication that risk management is effective is when risk has been reduced to meet:
Answer: A
What is the GREATEST concern with maintaining decentralized risk registers instead of a consolidated risk register?
Answer: A
I don't know why it is D. Even there have 2 risk register. It is follow the same risk analysis practice. I support A as management is difficult to manage total risk picture in a easy way.
Source: Adapted from community discussion — tsangckl
Which of the following is MOST important to include in regulatory and risk updates when a new legal requirement affects the organization?
Answer: C
Who should be accountable for monitoring the control environment to ensure controls are effective?
Answer: A
A: Correct answer Risk owner. The risk owner is accountable for the treatment and monitoring of the effectiveness of controls.
Source: Adapted from community discussion — Ceecil1959
Who is accountable for risk treatment?
Answer: A
Which of the following BEST enables the risk profile to serve as an effective resource to support business objectives?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1211. 1449 questions available.
Version 1.0.0. How we source questions