Question 71 · 1449 in bank
Which of the following is MOST important to include in a risk assessment of an emerging technology?
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is MOST important to include in a risk assessment of an emerging technology?
Answer: D
Which of the following would MOST electively reduce risk associated with an increased volume of online transactions on a retailer website?
Answer: B
The risk of increased transactions can be understood as, considered legitimate, what is needed is processing capacity to guarantee availability, otherwise the most appropriate control would be to establish a limit on transactions. I see no indication in the question to suggest that the increase is motivated by fraudulent use.
Source: Adapted from community discussion — john_boogieman
Which of the following is MOST important to consider when determining the value of an asset during the risk identification process?
Answer: C
Risk acceptance of an exception to a security control would MOST likely be justified when:
Answer: D
Which of the following standard operating procedure (SOP) statements BEST illustrates appropriate risk register maintenance?
Answer: B
This is the reasoning: The most appropriate statement that illustrates appropriate risk register maintenance is B. "Remove risk only following a significant change in the risk environment." It is important to regularly review and update the risk register, but risks should not be removed without a valid reason. Significant changes in the risk environment, such as changes in project scope, stakeholder expectations, or external factors, may warrant a review of the risk register and the removal or addition of risks.
Source: Adapted from community discussion — Koulyo
It is MOST important that security controls for a new system be documented in:
Answer: C
Which of the following is MOST important to review when determining whether a potential IT service provider's control environment is effective?
Answer: D
Which of the following will BEST help to ensure the continued effectiveness of the IT risk management function within an organization experiencing high employee turnover?
Answer: B
The PRIMARY purpose of using a framework for risk analysis is to:
Answer: C
Within the three lines of defense model, the accountability for the system of internal controls resides with:
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 71. 1449 questions available.
Version 1.0.0. How we source questions