Question 1411 · 1449 in bank
Which of the following would be the GREATEST concern for an IT risk practitioner when an employee has transferred to another department?
Show answer
Answer: C
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following would be the GREATEST concern for an IT risk practitioner when an employee has transferred to another department?
Answer: C
An organization is planning to implement a guest wireless network granting internet access only. Which of the following is the MOST important consideration to effectively mitigate the risk of guests gaining access to the organization's internal network?
Answer: B
Which of the following should be determined FIRST when a new security vulnerability is made public?
Answer: C
When should be a risk practitioner's PRIMARY focus when evaluating a proposed robotic process automation of a business service?
Answer: D
When evaluating a proposed robotic process automation (RPA) of a business service, a risk practitioner's PRIMARY focus should be on D. Control capability. RPA can introduce new risks to an organization's operations, including the potential for errors, data breaches, and regulatory violations. Therefore, it is essential to evaluate the control capability of the proposed RPA solution. The risk practitioner should assess the proposed RPA solution to determine whether it includes appropriate controls for identifying and mitigating risks. This might include controls around access management, data security, change management, and monitoring.
Source: Adapted from community discussion — Koulyo
Which of the following stakeholders are typically included as part of a line of defense within the three lines of defense model?
Answer: B
B: Legal team as the second line of defence. In the organization, these activities are carried out by business partners, sometimes referred to as functional areas. As examples: the legal department, finance, human resources, risk management, etc.
Source: Adapted from community discussion — Ceecil1959
Which of the following is the MOST important data attribute of key risk indicators (KRIs)?
Answer: C
What should a risk practitioner do FIRST when a shadow IT application is identified in a business owner's business impact analysis (BIA)?
Answer: D
the FIRST thing a risk practitioner should do is D. Determine the business purpose of the application. It is important to first understand the purpose and scope of the shadow IT application before taking any action. The risk practitioner should determine why the business owner is using the application, what data it processes, and what level of risk it presents to the organization. Once the purpose of the application is understood, the risk practitioner can work with the business owner to evaluate the risk and determine the appropriate course of action. This may involve including the application in the business continuity plan (BCP), reporting the finding to management, or segregating the application from the network, depending on the level of risk involved. However, taking any action without first understanding the purpose of the application could potentially disrupt business operations or create unnecessary costs. Therefore, determining the business purpose of the application should be the FIRST step taken by the risk practitioner.
Source: Adapted from community discussion — Koulyo
An organization is planning to move its application infrastructure from on-premise to the cloud. Which of the following is the BEST course of action to address the risk associated with data transfer if the relationship is terminated with the vendor?
Answer: D
Which of the following would BEST mitigate an identified risk scenario?
Answer: D
Which of the following is MOST important for mitigating ethical risk when establishing accountability for control ownership?
Answer: A
why not C? The MOST important factor for mitigating ethical risk when establishing accountability for control ownership among the given choices would be C. Ensuring performance metrics balance business goals with risk appetite. When establishing accountability for control ownership, it is important to ensure that performance metrics are in place that balance business goals with risk appetite. This means that the control owners should be incentivized to achieve business goals, but not at the expense of ethical considerations or risk management.
Source: Adapted from community discussion — Koulyo
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1411. 1449 questions available.
Version 1.0.0. How we source questions