The PRIMARY benefit of conducting continuous monitoring of access controls is the ability to identify.

• A.possible noncompliant activities that lead to data disclosure
• B.leading or lagging key risk indicators (KRIs)
• C.inconsistencies between security policies and procedures
• D.unknown threats to undermine existing access controls

Comment: *

Name: *

Email: *

Verification: *

Which of the following role carriers are responsible for setting up the risk governance process, establishing and maintaining a common risk view, making risk-aware business decisions, and setting the enterprise's risk culture?
Each correct answer represents a complete solution. Choose two.

• A.Senior management
• B.Chief financial officer (CFO)
• C.Human resources (HR)
• D.Board of directors

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST describes the role of the IT risk profile in strategic IT-related decisions?

• A.It provides input to business managers when preparing a business case for new IT projects.
• B.It facilitates the alignment of strategic IT objectives to business objectives.
• C.It helps assess the effects of IT decisions on risk exposure
• D.It compares performance levels of IT assets to value delivered.

Comment: *

Name: *

Email: *

Verification: *

An organization has outsourced its billing function to an external service provider. Who should own the risk of customer data leakage caused by the service provider?

• A.Business process owner
• B.The service provider
• C.Legal counsel
• D.Vendor risk manager

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important when developing key risk indicators (KRIs)?

• A.Availability of qualitative data.
• B.Alignment with regulatory requirements.
• C.Property set thresholds.
• D.Alignment with industry benchmarks.

Comment: *

Name: *

Email: *

Verification: *