Question 591 · 1449 in bank
An organization has sustained significant losses from a series of cyber events. Which of the following control types would MOST likely help reduce further losses?
Show answer
Answer: A
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
An organization has sustained significant losses from a series of cyber events. Which of the following control types would MOST likely help reduce further losses?
Answer: A
What is the MOST important information provided by key performance indicators (KPIs) in a risk management program?
Answer: A
A large organization plans to take advantage of cloud computing to reduce costs; however, there are data-use restrictions that require certain data to remain on premise. Which cloud model should the risk practitioner recommend for this deployment?
Answer: C
Which of the following provides the BEST assurance that an organization will be able to defend against cyber attacks?
Answer: A
While participating in a scenario analysis exercise, a risk practitioner was asked to determine the reputational impact of a system outage. Which of the following would be the BEST approach?
Answer: D
Using which of the following one can produce comprehensive result while performing qualitative risk analysis?
Answer: A
Using list of possible scenarios with threats and impacts will better frame the range of risk and hence can frame more informative result of qualitative analysis. Incorrect Answers: B: Cost and benefit analysis is used for taking financial decisions that can be formal or informal, such as appraisal of any project or proposal. The approach weighs the total cost against the benefits expected, and then identifies the most profitable option. It only decides what type of control should be applied for effective risk management. C, D: These are not sufficient for producing detailed result.
Which of the following should be a risk practitioner's PRIMARY consideration when evaluating the possible impact of an adverse event affecting corporate information assets?
Answer: D
Which of the following BEST enables an organization to increase the likelihood of identifying risk associated with unethical employee behavior?
Answer: B
Which of the following is MOST important to include in an IT risk management policy?
Answer: C
An organization recently completed a major restructuring project to reduce overhead costs by streamlining the approval hierarchy. Which of the following should be done FIRST by the control owner?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 591. 1449 questions available.
Version 1.0.0. How we source questions