Question 311 · 1449 in bank
Which of the following is the MOST comprehensive input to the risk assessment process specific to the effects of system downtime?
Show answer
Answer: C
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is the MOST comprehensive input to the risk assessment process specific to the effects of system downtime?
Answer: C
Which of the following would provide the BEST evidence of an effective internal control environment?
Answer: A
Which of the following has the GREATEST influence on an organization’s risk appetite?
Answer: D
Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of a disaster recovery test of critical business processes?
Answer: B
The BEST key performance indicator (KPI) to measure the effectiveness of a disaster recovery test of critical business processes is the percentage of processes recovered within the recovery time and point objectives. This KPI directly measures the ability of the disaster recovery plan to restore critical business processes within the time and point objectives that have been established. If the percentage of processes recovered is high, it indicates that the disaster recovery plan is effective and can be relied upon in the event of an actual disaster. While the number of issues and action items resolved during the recovery test is also an important KPI to consider, it does not provide as direct a measure of the effectiveness of the disaster recovery plan.
Source: Adapted from community discussion — john_boogieman
Which of the following is the PRIMARY objective of establishing an organization’s risk tolerance and appetite?
Answer: A
Which of the following is the MOST effective way to identify an application backdoor prior to implementation?
Answer: D
Which of the following is MOST likely to introduce risk for financial institutions that use blockchain?
Answer: C
After an annual risk assessment is completed, which of the following would be MOST important to communicate to stakeholders?
Answer: A
Which of the following is the PRIMARY reason for an organization to include an acceptable use banner when users log in?
Answer: B
The PRIMARY reason for periodic penetration testing of Internet-facing applications is to:
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 311. 1449 questions available.
Version 1.0.0. How we source questions