Question 1401 · 1449 in bank
The PRIMARY goal of conducting a business impact analysis (BIA) as part of an overall continuity planning process is to:
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
The PRIMARY goal of conducting a business impact analysis (BIA) as part of an overall continuity planning process is to:
Answer: D
A financial institution has identified high risk of fraud in several business applications. Which of the following controls will BEST help reduce the risk of fraudulent internal transactions?
Answer: A
A new regulatory requirement imposes severe fines for data leakage involving customers' personally identifiable information (PII). The risk practitioner has recommended avoiding the risk. Which of the following actions would BEST align with this recommendation?
Answer: B
As part of business continuity planning, which of the following is MOST important to include in a business impact analysis (BIA)?
Answer: A
sorry guys i am going with B: As part of business continuity planning, an assessment of recovery scenarios is MOST important to include in a business impact analysis (BIA). A business impact analysis (BIA) is a critical component of the business continuity planning process, which helps identify and prioritize critical business functions and processes and the impact of disruptions on these functions. It is important to assess recovery scenarios in a BIA as it helps identify and prioritize recovery objectives, and the strategies and resources required to achieve these objectives. Recovery scenarios should be based on the potential impact of disruptions identified during the BIA. While an assessment of threats to the organization (Option A) is important in identifying potential risks, it is not the MOST important element of a BIA.
Source: Adapted from community discussion — Koulyo
When documenting a risk response, which of the following provides the STRONGEST evidence to support the decision?
Answer: D
Follow-up Audit is an audit which verifies that corrective actions have been accomplished as scheduled. It determines that the actions are effective in preventing or minimizing future recurrence.
Source: Adapted from community discussion — john_boogieman
Which of the following is the MOST important activity when identifying relevant risk data?
Answer: D
An organization has made a decision to purchase a new IT system. During which phase of the system development life cycle (SDLC) will identified risk MOST likely lead to architecture and design trade-offs?
Answer: A
A is correct. Page 225 of CRISC review manual 7th - has the information presented in a table of SDLC stages and that during acquisition phase, trade-offs in the architecture and design decisions are made.
Source: Adapted from community discussion — jseeker
From a risk management perspective, which of the following is the PRIMARY benefit of using automated system configuration validation tools?
Answer: D
From a risk management perspective, the PRIMARY benefit of using automated system configuration validation tools is D. Residual risk is reduced. Automated system configuration validation tools can help reduce residual risk, which is the level of risk that remains after risk management strategies have been implemented. By automatically validating system configurations against industry standards, best practices, and compliance requirements, these tools can help identify and mitigate configuration-related vulnerabilities and reduce the likelihood of security incidents and system failures.
Source: Adapted from community discussion — Koulyo
Which of the following is the BEST approach to mitigate the risk associated with a control deficiency?
Answer: D
Who should be responsible for strategic decisions on risk management?
Answer: B
Strategic risk management is a CEO and board-level priority. Two thirds (67%) of the surveyed companies say the CEO, board or board risk committee has oversight when it comes to managing strategic risk.
Source: Adapted from community discussion — Ceecil1959
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1401. 1449 questions available.
Version 1.0.0. How we source questions