A risk practitioner is preparing a report to communicate changes in the risk and control environment. The BEST way to engage stakeholder attention is to:

• A.include a roadmap to achieve operational excellence
• B.include a summary linking information to stakeholder needs
• C.publish the report on-demand for stakeholders
• D.include detailed deviations from industry benchmarks

Comment: *

Name: *

Email: *

Verification: *

In the project initiation phase of System Development Life Cycle, there is information on project initiated by which of the following role carriers?

• A.CRO
• B.Sponsor
• C.Business management
• D.CIO

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important consideration for a risk practitioner when making a system implementation go-live recommendation?

• A.Availability of in-house resources
• B.Completeness of system documentation
• C.Variances between planned and actual cost
• D.Results of end user acceptance testing

Comment: *

Name: *

Email: *

Verification: *

What is the most important benefit of classifying information assets?

• A.Linking security requirements to business objectives
• B.Allotting risk ownership
• C.Defining access rights
• D.Identifying controls that should be applied
• E.Explanation:
  All of the options are directly or indirectly are the advantages of classifying information assets, but the most important benefit amongst them is that appropriate controls can be identified.

Comment: *

Name: *

Email: *

Verification: *

Business areas within an organization have engaged various cloud service providers directly without assistance from the IT department. What should the risk practitioner do?

• A.Engage with the business area managers to review controls applied.
• B.Recommend the IT department remove access to the cloud services.
• C.Escalate to the risk committee.
• D.Recommend a risk assessment be conducted.

Comment: *

Name: *

Email: *

Verification: *