Which of the following should be management's PRIMARY consideration when approving risk response action plans?

• A.Ease of implementing the risk treatment solution
• B.Changes in residual risk after implementing the plans
• C.Ability of the action plans to address multiple risk scenarios
• D.Prioritization for implementing the action plans

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of the GHY project for your organization. You are working with your project team to begin identifying risks for the project. As part of your preparation for identifying the risks within the project you will need eleven inputs for the process. Which one of the following is NOT an input to the risk identification process?

• A.Quality management plan
• B.Stakeholder register
• C.Cost management plan
• D.Procurement management plan

Comment: *

Name: *

Email: *

Verification: *

When evaluating enterprise IT risk management it is MOST important to:

• A.review alignment with the organization's investment plan
• B.confirm the organization s risk appetite and tolerance
• C.create new control processes to reduce identified IT risk scenarios
• D.report identified IT risk scenarios to senior management

Comment: *

Name: *

Email: *

Verification: *

What is the MOST important consideration when aligning IT risk management with the enterprise risk management (ERM) framework?

• A.Business unit support
• B.Senior management participation
• C.Risk and control ownership
• D.Risk nomenclature and taxonomy

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST approach to use when creating a comprehensive set of IT risk scenarios?

• A.Gather scenarios from senior management
• B.Derive scenarios from IT risk policies and standards
• C.Benchmark scenarios against industry peers
• D.Map scenarios to a recognized risk management framework

Comment: *

Name: *

Email: *

Verification: *