Which of the following is MOST influential when management makes risk response decisions?

• A.Detection risk
• B.Residual risk
• C.Audit risk
• D.Risk appetite

Comment: *

Name: *

Email: *

Verification: *

While reviewing the risk register, a risk practitioner notices that different business units have significant variances in inherent risk for the same risk scenario. Which of the following is the BEST course of action?

• A.Update the risk register to ensure both risk scenarios have the highest residual risk.
• B.Request that both business units conduct another review of the risk.
• C.Review the assumptions of both risk scenarios to determine whether the variance is reasonable.
• D.Update the risk register with the average of residual risk for both business units.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST facilitates the development of effective IT risk scenarios?

• A.Participation by IT subject matter experts
• B.Validation by senior management
• C.Integration of contingency planning
• D.Utilization of a cross-functional team

Comment: *

Name: *

Email: *

Verification: *

A company has located its computer center on a moderate earthquake fault. Which of the following is the MOST important consideration when establishing a contingency plan and an alternate processing site?

• A.The alternative site does not reside on the same fault to matter how the distance apart.
• B.The contingency plan for high priority applications does not involve a shared cold site.
• C.The contingency plan provides for backup media to be taken to the alternative site.
• D.The alternative site is a hot site with equipment ready to resume processing immediately.

Comment: *

Name: *

Email: *

Verification: *

A risk practitioner shares the results of a vulnerability assessment for a critical business application with the business manager. Which of the following is the NEXT step?

• A.Evaluate the impact of the vulnerabilities to the business application.
• B.Develop a risk action plan to address the findings.
• C.Conduct a penetration test to validate the vulnerabilities from the findings.
• D.Escalate the findings to senior management and internal audit.

Comment: *

Name: *

Email: *

Verification: *