Question 491 · 1449 in bank
Which of the following is MOST likely to result in a major change to the overall risk profile of the organization?
Show answer
Answer: C
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is MOST likely to result in a major change to the overall risk profile of the organization?
Answer: C
Which of the following is the ULTIMATE objective of utilizing key control indicators (KCIs) in the risk management process?
Answer: B
An organization requires a third-party attestation report annually from all service providers. One service provider is unable to provide the required report due to recent changes in ownership. Which of the following is the BEST course of action for the risk practitioner?
Answer: D
Which of the following processes BEST enables a risk practitioner to gather evidence about the threat environment for further analysis?
Answer: D
D. Threat intelligence. Threat intelligence involves the collection, evaluation, and analysis of information about existing and emerging threats. This process is specifically designed to provide insights into the threat landscape, helping organizations understand the nature, capabilities, intentions, and actions of potential adversaries. It enables the identification of potential threats, their tactics, techniques, and procedures (TTPs), and helps in making informed decisions to enhance security posture. While risk assessment, threat modeling, and vulnerability scanning are valuable for understanding and managing risks, threat intelligence is more focused on the continuous gathering and analysis of information specifically about threats.
Source: Adapted from community discussion — Kennethlim79
Which of the following BEST enables a risk practitioner to determine the appropriate risk treatment for a materialized event?
Answer: D
The best approach to determining the appropriate risk treatment for a materialized event is to conduct a thorough and systematic risk assessment. This involves identifying the actual impacts and consequences of the event, as well as the likelihood of recurrence or escalation.
Source: Adapted from community discussion — tech_sulaiman
To drive effective risk management, it is MOST important that an organization’s policy framework is:
Answer: C
Which of the following is the MOST important risk management activity during project initiation?
Answer: B
Which of the following provides a risk practitioner with the MOST reliable evidence of a third-party’s ability to protect the confidentiality of sensitive corporate information?
Answer: A
An insurance company handling sensitive and personal information from its customers receives a large volume of telephone requests and electronic communications daily. Which of the following is MOST important to include in a risk awareness training session for the customer service department?
Answer: A
Which of the following is the BEST approach to resolve a disagreement between stakeholders regarding the impact of a potential risk scenario?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 491. 1449 questions available.
Version 1.0.0. How we source questions