Question 61 · 1449 in bank
When formulating a social media policy to address information leakage, which of the following is the MOST important concern to address?
Show answer
Answer: C
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
When formulating a social media policy to address information leakage, which of the following is the MOST important concern to address?
Answer: C
Which of the following should be the risk practitioner's FIRST course of action when an organization plans to adopt a cloud computing strategy?
Answer: C
Which element of an organization's risk register is MOST important to update following the commissioning of a new financial reporting system?
Answer: A
Which of the following is the BEST way to address a board's concern about the organization's cybersecurity posture?
Answer: D
Which of the following is MOST influential when management makes risk response decisions?
Answer: B
Which of the following would MOST likely drive the need to review and update key performance indicators (KPIs) for critical IT assets?
Answer: A
Which of the following is the MOST important component of effective security incident response?
Answer: D
An organization has an approved bring your own device (BYOD) policy. Which of the following would BEST mitigate the security risk associated with the inappropriate use of enterprise applications on the devices?
Answer: D
When is the BEST time to identify risk associated with major projects to determine a mitigation plan?
Answer: D
C. Project planning phase is the BEST time to identify risk associated with major projects to determine a mitigation plan. During the project planning phase, project managers can identify potential risks and develop a risk management plan to mitigate or eliminate those risks. By identifying risks early in the project, project managers can take steps to address them before they become more difficult and expensive to manage. This can help ensure that the project stays on track and that the desired outcomes are achieved. During the project initiation phase (option D), the project has not yet been fully defined, making it difficult to identify risks in detail.
Source: Adapted from community discussion — Koulyo
Which of the following is a risk practitioner's BEST recommendation to address an organization's need to secure multiple systems with limited IT resources?
Answer: D
Going with D. In the BIA section of the 7th edition review manual it discusses that BIA lets you prioritize risk as a risk practitioner. Limited resources are applied to systems in order of criticality.
Source: Adapted from community discussion — CbtL
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 61. 1449 questions available.
Version 1.0.0. How we source questions