Which of the following MUST be updated to maintain an IT risk register?

• A.Risk appetite
• B.Enterprise-wide IT risk assessment
• C.Risk tolerance
• D.Expected frequency and potential impact

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be the GREATEST challenge when implementing a corporate risk framework for a global organization?

• A.Privacy risk controls
• B.Management support
• C.Risk taxonomy
• D.Business continuity

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a key component of strong internal control environment?

• A.RMIS
• B.Segregation of duties
• C.Manual control
• D.Automated tools

Comment: *

Name: *

Email: *

Verification: *

To which level the risk should be reduced to accomplish the objective of risk management?

• A.To a level where ALE is lower than SLE
• B.To a level where ARO equals SLE
• C.To a level that an organization can accept
• D.To a level that an organization can mitigate

Comment: *

Name: *

Email: *

Verification: *

Who should be responsible for implementing and maintaining security controls?

• A.Data custodian
• B.Internal auditor
• C.Data owner
• D.End user

Comment: *

Name: *

Email: *

Verification: *