Question 631 · 1449 in bank
Which of the following is the BEST key performance indicator (KPI) to measure the ability to deliver uninterrupted IT services?
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST key performance indicator (KPI) to measure the ability to deliver uninterrupted IT services?
Answer: B
Before selecting a final risk response option for a given risk scenario, management should FIRST:
Answer: D
Which of the following is the PRIMARY benefit of consistently recording risk assessment results in the risk register?
Answer: A
The PRIMARY focus of an ongoing risk awareness program should be to:
Answer: A
Which of the following deficiencies identified during a review of an organization’s cybersecurity policy should be of MOST concern?
Answer: D
ll of the deficiencies mentioned are concerning, but the one that should be of MOST concern is: D. The policy has not been approved by the organization's board. Approval by the organization's board is crucial because it signifies high-level acknowledgment and commitment to the cybersecurity policy. Without board approval, the policy may lack the necessary authority, resources, and enforcement mechanisms to be effectively implemented throughout the organization. This deficiency indicates a fundamental gap in governance and oversight, which can undermine the organization's ability to effectively address cybersecurity risks.
Source: Adapted from community discussion — Joloms
Which of the following is the BEST way to help ensure risk will be managed properly after a business process has been re-engineered?
Answer: A
. Conducting a post-implementation review to determine lessons learned. Conducting a post-implementation review is crucial for evaluating the effectiveness of the re-engineered business process and identifying any risks that may have emerged or not been adequately addressed during the re-engineering process. This review allows the organization to learn from its experiences, identify areas for improvement, and adjust risk management strategies accordingly. It helps in refining future re-engineering efforts and ensures that risks are managed properly in the long term. While the other options may also be important components of risk management, conducting a post-implementation review is the best approach to ensure that risks are managed properly after a business process has been re-engineered.
Source: Adapted from community discussion — Joloms
Of the following, who should be responsible for determining the inherent risk rating of an application?
Answer: D
D. Risk practitioner: The risk practitioner is specifically trained to evaluate and assess risks. They have the expertise to determine the inherent risk rating by analyzing factors such as the application's sensitivity, the potential impact of risk events, and the likelihood of those events occurring.
Source: Adapted from community discussion — Sara98
Which of the following should be of GREATEST concern to a risk practitioner reviewing the implementation of an emerging technology?
Answer: C
Which process is MOST effective to determine relevance of threats for risk scenarios?
Answer: A
Which of the following should be of GREATEST concern to a risk practitioner reviewing an organization’s disaster recovery plan (DRP)?
Answer: C
In this context, if the DRP does not identify a hot site (Option C), it means there might not be a readily available alternative location to quickly resume operations, which could lead to extended downtime and operational disruption. So yes, the absence of a hot site remains a crucial concern for ensuring the plan’s effectiveness in a disaster scenario.
Source: Adapted from community discussion — Staanlee
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 631. 1449 questions available.
Version 1.0.0. How we source questions