Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is the PRIMARY risk management responsibility of the second line of defense?
Answer: D
Should be D. The first line of defense: Owns and manages risks/risk owners/managers. The second line of defense: Oversees risks/risk control and compliance. The third line of defense: Provides independent assurance/risk assurance.
Source: Adapted from community discussion — nikifor
An enterprise has identified risk events in a project. While responding to these identified risk events, which among the following stakeholders is MOST important for reviewing risk response options to an IT risk.
Answer: D
Which of the following is the BEST way to ensure ongoing control effectiveness?
Answer: C
Who should have the authority to approve an exception to a control?
Answer: D
What is the process for selecting and implementing measures to impact risk called?
Answer: A
Which of the following is a responsibility of the second line of defense in the three lines of defense model?
Answer: B
To mitigate the risk of using a spreadsheet to analyze financial data, IT has engaged a third-party vendor to deploy a standard application to automate the process. Which of the following parties should own the risk associated with calculation errors?
Answer: B
Which of the following provides the BEST evidence that risk responses are effective?
Answer: D
A risk practitioner has just learned about new malware that has severely impacted industry peers worldwide. Which of the following should be done FIRST?
Answer: D
Which of the following is the MAIN purpose of monitoring risk?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 21. 1449 questions available.
Version 1.0.0. How we source questions