Which of the following is the MOST important component of any change management process?

• A.Scheduling
• B.Outage planning
• C.Back-out procedures
• D.Management approval

Comment: *

Name: *

Email: *

Verification: *

Who is responsible for verifying that audit directives are implemented?

• A.BOD Audit Committee
• B.IT Management
• C.IT Security
• D.Internal Audit

Comment: *

Name: *

Email: *

Verification: *

Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information.
All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN. The organization wants a more permanent solution to the threat to user credential compromise through phishing.
What technical solution would BEST address this issue?

• A.Multi-factor authentication employing hard tokens
• B.Forcing password changes every 90 days
• C.Decreasing the number of employees with administrator privileges
• D.Professional user education on phishing conducted by a reputable vendor

Comment: *

Name: *

Email: *

Verification: *

As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publicity can jeopardize your own brand.
Which is the BEST type of risk that defines this event?

• A.Strategic Risk
• B.Compliance Risk
• C.Reputation Risk
• D.Operational Risk

Comment: *

Name: *

Email: *

Verification: *

In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?

• A.The organization uses exclusively a quantitative process to measure risk
• B.The organization uses exclusively a qualitative process to measure risk
• C.The organization's risk tolerance is high
• D.The organization's risk tolerance is lo

Comment: *

Name: *

Email: *

Verification: *