Free ISACA CRISC Exam Dumps Questions & Answers

Which of the following should be the PRIMARY driver for an organization on a multi-year cloud implementation to publish a cloud security policy?

• A.Establishing minimum cloud security requirements
• B.Evaluating gaps in the on-premise and cloud security profiles
• C.Enforcing compliance with cloud security parameters
• D.Educating IT staff on variances between on premise and cloud security

Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of IT policies? The number of:

• A.Key technology controls covered by IT policies.
• B.Senior management approvals.
• C.Processes covered by IT policies.
• D.IT policy exceptions granted.

Which of the following should be the FIRST course of action if the risk associated with a new technology is found to be increasing?

• A.Implement additional controls.
• B.Re-evaluate current controls.
• C.Escalate the risk to senior management.
• D.Revise the current risk action plan.

Which of the following practices MOST effectively safeguards the processing of personal data?

• A.Personal data attributed to a specific data subject is tokenized.
• B.Data protection impact assessments are performed on a regular basis.
• C.Personal data certifications are performed to prevent excessive data collection.
• D.Data retention guidelines are documented, established, and enforced.

Who is the MOST appropriate owner for newly identified IT risk?

• A.The individual with authority to commit organizational resources to mitigate the risk
• B.The individual with the most IT risk-related subject matter knowledge
• C.The manager responsible for IT operations that will support the risk mitigation efforts
• D.A project manager capable of prioritizing the risk remediation efforts