Question 171 · 1449 in bank
Which of the following should be of GREATEST concern when reviewing the results of an independent control assessment to determine the effectiveness of a vendor's control environment?
Show answer
Answer: A
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following should be of GREATEST concern when reviewing the results of an independent control assessment to determine the effectiveness of a vendor's control environment?
Answer: A
What should be the PRIMARY objective for a risk practitioner performing a post-implementation review of an IT risk mitigation project?
Answer: D
The PRIMARY objective for a risk practitioner performing a post-implementation review of an IT risk mitigation project should be verifying that the risk level has been lowered.
Source: Adapted from community discussion — john_boogieman
A multinational organization is developing a risk awareness program to promote a unified risk culture across all regions. Which of the following will BEST enable the achievement of this objective?
Answer: A
Applying risk policies in a consistent manner across regions is likely to be the BEST approach to achieve this objective. Applying risk policies in a consistent manner across regions helps to ensure that all employees understand and follow the same risk management practices and procedures. This approach can help to promote a shared understanding of risk management principles and practices, and can help to minimize the potential for confusion or misunderstanding that can arise when different regions or business units use different approaches to managing risk. Centralizing the risk management function can also be an effective strategy for promoting a unified risk culture, as it can help to ensure that all employees have access to consistent risk management tools, resources, and expertise. However, this approach may be more challenging to implement in a multinational organization, as it may be difficult to establish a single risk management function that can effectively serve the needs of all regions and business units.
Source: Adapted from community discussion — john_boogieman
Which of the following will BEST help to ensure key risk indicators (KRIs) provide value to risk owners?
Answer: B
Which of the following is the MOST relevant information to include in a risk management strategy?
Answer: D
A risk practitioner has been hired to establish risk management practices to be embedded across an organization. Which of the following should be the FIRST course of action?
Answer: B
An IT risk profile should be reviewed and updated when a new:
Answer: A
Which of the following is the GREATEST benefit of using key control indicators (KCIs)?
Answer: C
An organization recently restructured its leadership team and implemented emerging technologies. Which of the following MUST be validated to ensure risk is managed to an acceptable level?
Answer: D
The objective of aligning mitigating controls to risk appetite is to ensure that:
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 171. 1449 questions available.
Version 1.0.0. How we source questions