Question 601 · 1449 in bank
A risk practitioner wants to identify potential risk events that affect the continuity of a critical business process. Which of the following should the risk practitioner do FIRST?
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
A risk practitioner wants to identify potential risk events that affect the continuity of a critical business process. Which of the following should the risk practitioner do FIRST?
Answer: D
Which of the following is the MOST important information for determining inherent risk?
Answer: B
Which of the following is MOST helpful in reducing the likelihood of inaccurate risk assessment results?
Answer: C
Which of the following is a risk practitioner's BEST recommendation to management when testing results indicate the organization's recovery time objective (RTO) cannot be met?
Answer: A
Which of the following is the BEST method for discovering high-impact risk types?
Answer: C
Failure modes and effects analysis is used in discovering high-impact risk types. FMEA: ✑ Is one of the tools used within the Six Sigma methodology to design and implement a robust process to: - Identify failure modes - Establish a risk priority so that corrective actions can be put in place to address and reduce the risk - Helps in identifying and documenting where in the process the source of the failure impacts the (internal or external) customer - Is used to determine failure modes and assess risk posed by the process and thus, to the enterprise as a whole' Incorrect Answers: A, D: These two are the methods of analyzing risk, but not specifically for high-impact risk types. Hence is not the best answer. B: Delphi is a technique to identify potential risk. In this technique, the responses are gathered via a question: and their inputs are organized according to their contents. The collected responses are sent back to these experts for further input, addition, and comments. The final list of risks in the project is prepared after that. The participants in this technique are anonymous and therefore it helps prevent a person from unduly influencing the others in the group. The Delphi technique helps in reaching the consensus quickly.
Source: Adapted from community discussion — SuperMax
Which of the following is the GREATEST benefit of establishing a program to design, report, and monitor key control indicators (KCIs) as part of the risk management process?
Answer: D
Which of the following is the PRIMARY focus of enterprise architecture (EA)?
Answer: A
From an IT risk perspective, which of the following has the GREATEST impact on organizational strategy?
Answer: A
A. Changes in IT risk tolerance. IT risk tolerance is a fundamental aspect that dictates how an organization approaches and manages IT risks. Changes in IT risk tolerance can significantly influence organizational strategy, as they directly affect decision-making regarding IT investments, the adoption of new technologies, the allocation of resources for risk mitigation, and the overall approach to managing IT-related threats and opportunities. A shift in risk tolerance could lead to more aggressive or more conservative strategies in IT operations and planning. While the methodology for IT risk identification, the complexity of recovery plans, and the complexity of IT architecture are important considerations in IT risk management, they are typically influenced by or operate within the parameters set by the organization's IT risk tolerance. Therefore, changes in risk tolerance are more likely to have a sweeping and foundational impact on organizational strategy
Source: Adapted from community discussion — Kennethlim79
An organization recently experienced multiple breaches that were detected months later. Which of the following would be MOST useful for timely monitoring and analysis going forward?
Answer: B
Which of the following scenarios is MOST likely to cause a risk practitioner to request a formal risk acceptance sign-off?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 601. 1449 questions available.
Version 1.0.0. How we source questions