Question 201 · 1449 in bank
Which of the following is MOST important to promoting a risk-aware culture?
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is MOST important to promoting a risk-aware culture?
Answer: B
Mary is the project manager for the BLB project. She has instructed the project team to assemble, to review the risks. She has included the schedule management plan as an input for the quantitative risk analysis process. Why is the schedule management plan needed for quantitative risk analysis?
Answer: C
The controls within the schedule management plan can shape how quantitative risk analysis will be performed on the schedule. Schedule management plan also describes how the schedule contingencies will be reported and assessed. Incorrect Answers: A: When risks are likely to happen is important, but it is not the best answer for this question C: This is not a valid answer for this question throughout the project, but it is not scheduled during the quantitative risk analysis process. D: Risks may affect the project schedule, but this is not the best answer for the question.
When a risk practitioner is determining a system's criticality, it is MOST helpful to review the associated:
Answer: B
B. business impact analysis (BIA) When a risk practitioner is determining a system's criticality, it is most helpful to review the associated business impact analysis (BIA). A BIA helps identify and evaluate the potential effects of an interruption or disruption to critical business operations due to an incident or event.
Source: Adapted from community discussion — Broesweelies
Which of the following would be a risk practitioner's GREATEST concern with the use of a vulnerability scanning tool?
Answer: B
Which of the following is the MOST important key performance indicator (KPI) to monitor the effectiveness of disaster recovery processes?
Answer: D
Which of the following BEST enables an organization to develop a comprehensive key performance indicator (KPI) strategy to measure all key controls?
Answer: B
An organization has outsourced its accounts payable function to an external service provider that does not have an effective business continuity pian (BCP) in place. Who owns the associated risk?
Answer: C
The organization that has outsourced its accounts payable function to the external service provider owns the associated risk. It is the responsibility of the organization to ensure that the external service provider has effective business continuity plans (BCP) in place to manage the risk associated with outsourcing the function.
Source: Adapted from community discussion — john_boogieman
Which of the following would BEST enable senior management to make informed decisions about the effectiveness of existing controls to mitigate risk?
Answer: B
During a risk assessment, a risk practitioner learns that an IT risk factor is adequately mitigated by compensating controls in an associated business process. Which of the following would enable the MOST effective management of the residual risk?
Answer: C
What should be the PRIMARY objective of updating a risk awareness program in response to a steady rise in cybersecurity threats across the industry?
Answer: B
B. To increase familiarity and understanding of potential security incidents The primary objective of updating a risk awareness program in response to a steady rise in cybersecurity threats across the industry should be to increase familiarity and understanding of potential security incidents. By enhancing employees' knowledge and awareness of the evolving threat landscape, the organization can better prepare its workforce to recognize, report, and respond to potential cybersecurity incidents, ultimately reducing the likelihood and impact of such events.
Source: Adapted from community discussion — Broesweelies
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 201. 1449 questions available.
Version 1.0.0. How we source questions