Which of the following will BEST ensure that information security risk factors are mitigated when developing in-house applications?

• A.Identify key risk indicators (KRIs) as process output.
• B.Include information security control specifications in business cases.
• C.Identify information security controls in the requirements analysis
• D.Design key performance indicators (KPIs) for security in system specifications.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST useful when measuring the progress of a risk response action plan?

• A.Annual loss expectancy (ALE) changes
• B.Resource expenditure against budget
• C.An up-to-date risk register
• D.Percentage of mitigated risk scenarios

Comment: *

Name: *

Email: *

Verification: *

An application runs a scheduled job that compiles financial data from multiple business systems and updates the financial reporting system. If this job runs too long, it can delay financial reporting. Which of the following is the risk practitioner's BEST recommendation?

• A.Ensure the enterprise has a process to detect such situations.
• B.Implement database activity and capacity monitoring.
• C.Ensure the business is aware of the risk.
• D.Consider providing additional system resources to this job.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important element of a successful risk awareness training program?

• A.Providing metrics for measurement
• B.Customizing content for the audience
• C.Providing incentives to participants
• D.Mapping to a recognized standard

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT true for risk governance?

• A.Risk governance is based on the principles of cooperation, participation, mitigation and sustainability, and is adopted to achieve more effective risk management.
• B.Risk governance requires reporting once a year.
• C.Risk governance seeks to reduce risk exposure and vulnerability by filling gaps in risk policy.
• D.Risk governance is a systemic approach to decision making processes associated to natural and technological risks.
• E.Explanation:
  Risk governance is a continuous life cycle that requires regular reporting and ongoing review, not
  once a year.

Comment: *

Name: *

Email: *

Verification: *