Question 331 · 1449 in bank
Who is MOST important to include in the assessment of existing IT risk scenarios?
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Who is MOST important to include in the assessment of existing IT risk scenarios?
Answer: B
Which of the following BEST facilitates the identification of appropriate key performance indicators (KPIs) for a risk management program?
Answer: A
Consulting risk owners is the best approach to facilitate the identification of appropriate key performance indicators (KPIs) for a risk management program.
Source: Adapted from community discussion — john_boogieman
An organization plans to implement a new Software as a Service (SaaS) speech-to-text solution. Which of the following is MOST important to mitigate risk associated with data privacy?
Answer: D
The MAIN purpose of selecting a risk response is to:
Answer: A
An organization is adopting blockchain for a new financial system: Which of the following should be the GREATEST concern for a risk practitioner evaluating the system’s production readiness?
Answer: D
Which of the following is the BEST way to ensure data is properly sanitized while in cloud storage?
Answer: A
Which of the following is the GREATEST benefit of a three lines of defense structure?
Answer: A
You are the project manager of the GHY project for your organization. You are working with your project team to begin identifying risks for the project. As part of your preparation for identifying the risks within the project you will need eleven inputs for the process. Which one of the following is NOT an input to the risk identification process?
Answer: D
What should be the PRIMARY consideration related to data privacy protection when there are plans for a business initiative to make use of personal information?
Answer: B
B. Do not collect or retain data that is not needed. The primary consideration related to data privacy protection should be to collect and retain only the data that is necessary for the business initiative. This concept, known as data minimization, helps to reduce the amount of personal information held by the organization and therefore decreases the risk of unauthorized access or misuse of data. While limiting access, redacting data, and encrypting data are essential steps to protect privacy, they should be implemented in addition to data minimization for a comprehensive approach to data privacy protection.
Source: Adapted from community discussion — Broesweelies
Which of the following is the BEST approach for an organization in a heavily regulated industry to comprehensively test application functionality?
Answer: D
If it has to be extensively tested, the anonymization process can remove the utility of the data. Masking or replacing personally identifiable information, such as names or addresses, preserve the underlying data structure and relationships. This allows for comprehensive testing while still protecting sensitive information.
Source: Adapted from community discussion — john_boogieman
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 331. 1449 questions available.
Version 1.0.0. How we source questions