Which of the following is the FIRST step in managing the risk associated with the leakage of confidential data?

• A.Conduct an awareness program for data owners and users.
• B.Define and implement a data classification policy
• C.Maintain and review the classified data inventor.
• D.Implement mandatory encryption on data

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of GHT project. A risk event has occurred in your project and you have identified it. Which of the following tasks you would do in reaction to risk event occurrence? Each correct answer represents a part of the solution. Choose three.

• A.Monitor risk
• B.Maintain and initiate incident response plans
• C.Update risk register
• D.Communicate lessons learned from risk events

Correct Answer: A,B,D

Explanation/Reference:
Explanation:
When the risk events occur then following tasks have to done to react to it:
Maintain incident response plans

Monitor risk

Initiate incident response

Communicate lessons learned from risk events

Incorrect Answers:
C: Risk register is updated after applying appropriate risk response and at the time of risk event occurrence.

Comment: *

Name: *

Email: *

Verification: *

A key risk indicator (KRI) indicates a reduction in the percentage of appropriately patched servers. Which of the following is the risk practitioner's BEST course of action?

• A.Outsource the vulnerability management process.
• B.Review the patch management process.
• C.Determine changes in the risk level.
• D.Add agenda item to the next risk committee meeting.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be PRIMARILY considered while designing information systems controls?

• A.The IT strategic plan
• B.The existing IT environment
• C.The organizational strategic plan
• D.The present IT budget
• E.Explanation:
  Review of the enterprise's strategic plan is the first step in designing effective IS controls that
  would fit the enterprise's long-term plans.
• F.is incorrect. Review of the existing IT environment is also useful and necessary but is
  not the first step that needs to be undertaken.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the PRIMARY recipient of reports showing the progress of a current IT risk mitigation project?

• A.Project sponsor
• B.Senior management
• C.IT risk manager
• D.Project manager

Comment: *

Name: *

Email: *

Verification: *