Question 291 · 1449 in bank
Which of the following is the MOST important benefit of reporting risk assessment results to senior management?
Show answer
Answer: A
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is the MOST important benefit of reporting risk assessment results to senior management?
Answer: A
Which of the following is the GREATEST benefit of implementing an enterprise risk management (ERM) program?
Answer: A
When confirming whether implemented controls are operating effectively, which of the following is MOST important to review?
Answer: B
Which of the following is the PRIMARY reason for a risk practitioner to review an organization’s IT asset inventory?
Answer: B
When performing a risk assessment of a new service to support a core business process, which of the following should be done FIRST to ensure continuity of operations?
Answer: A
The FIRST step when performing a risk assessment of a new service to support a core business process to ensure continuity of operations is to identify conditions that may cause disruptions. Identifying conditions that may cause disruptions is an important step in ensuring continuity of operations, as it helps to identify potential risks that may impact the service and the core business process it supports. This involves analyzing the service to determine its dependencies, potential vulnerabilities, and any other factors that may cause disruptions. By identifying these conditions early on, appropriate controls can be put in place to minimize their impact on the business process.
Source: Adapted from community discussion — john_boogieman
Risks to an organization's image are referred to as what kind of risk?
Answer: D
Strategic risks are those risks which have potential outcome of not fulfilling on strategic objectives of the organization as planned. Since the strategic objective will shape and impact the entire organization, the risk of not meeting that objective can impose a great threat on the organization. Strategic risks can be broken down into external and internal risks: ✑ External risks are those circumstances from outside the enterprise which will have a potentially damaging or helpful impact on the enterprise. These risks include sudden change of economy, industry, or regulatory conditions. Some of the external risks are predictable while others are not. For instance, a recession may be predictable and the enterprise may be able to hedge against the dangers economically; but the total market failure may not as predictable and can be much more devastating. ✑ Internal risks usually focus on the image or reputation of the enterprise. some of the risks that are involved in this are public communication, trust, and strategic agreement from stakeholders and customers.
Which of the following is the MOST important information to cover in a business continuity awareness training program for all employees of the organization?
Answer: B
Which of the following is the MOST effective way for a large and diversified organization to minimize risk associated with unauthorized software on company devices?
Answer: B
An organization is implementing a project to automate the purchasing process, including the modification of approval controls. Which of the following tasks is the responsibility of the risk practitioner?
Answer: C
As a risk practitioner, the primary responsibility is to identify and analyze the potential risks associated with the changes in the project. By performing a gap analysis of the impacted control processes, the risk practitioner can identify any new risks or changes in the risk profile that may arise from the modification of approval controls in the automated purchasing process. This will help the organization to update or implement new controls to mitigate the identified risks effectively.
Source: Adapted from community discussion — Broesweelies
Which of the following situations presents the GREATEST challenge to creating a comprehensive IT risk profile of an organization?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 291. 1449 questions available.
Version 1.0.0. How we source questions