Question 941 · 1449 in bank
Which of the following is the GREATEST risk associated with using unmasked data for testing purposes?
Show answer
Answer: A
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is the GREATEST risk associated with using unmasked data for testing purposes?
Answer: A
An organization is implementing encryption for data at rest to reduce the risk associated with unauthorized access. Which of the following MUST be considered to assess the residual risk?
Answer: D
Which of the following is a KEY outcome of risk ownership?
Answer: B
Which of the following should be an element of the risk appetite of an organization?
Answer: A
Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of a vulnerability management process?
Answer: A
An organization operates in a jurisdiction where heavy fines are imposed for leakage of customer data. Which of the following provides the BEST input to assess the inherent risk impact?
Answer: A
An organization has allowed its cyber risk insurance to lapse while seeking a new insurance provider. The risk practitioner should report to management that the risk has been:
Answer: A
A risk assessment has identified that an organization may not be in compliance with industry regulations. The BEST course of action would be to:
Answer: B
B. Conduct a gap analysis against compliance criteria. The best course of action when a risk assessment identifies that an organization may not be in compliance with industry regulations is to conduct a gap analysis against compliance criteria. A gap analysis involves comparing the organization's current practices, processes, and controls against the requirements of the relevant regulations. This approach helps identify areas where the organization falls short of compliance, enabling them to pinpoint specific gaps that need to be addressed. While all the other options (collaborating with management, identifying necessary controls, modifying internal assurance activities) can play roles in addressing compliance issues, conducting a gap analysis is a systematic and methodical way to understand the extent of the non-compliance and determine the specific areas that need attention. It provides a clear roadmap for bringing the organization into compliance.
Source: Adapted from community discussion — Staanlee
What is the BEST information to present to business control owners when justifying costs related to controls?
Answer: A
I think A is more suitable for management rather than risk owner. Risk owner is more concerned with the impact and frequency of impact
Source: Adapted from community discussion — Sbills
Which of the following is the GREATEST concern when using a generic set of IT risk scenarios for risk analysis?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 941. 1449 questions available.
Version 1.0.0. How we source questions