Which of the following should be the PRIMARY objective of a risk awareness training program?

• A.To promote awareness of the risk governance function.
• B.To clarify fundamental risk management principles.
• C.To enable risk-based decision making.
• D.To ensure sufficient resources are available.

Comment: *

Name: *

Email: *

Verification: *

You and your project team are identifying the risks that may exist within your project. Some of the risks are small risks that won't affect your project much if they happen. What should you do with these identified risk events?

• A.These risks can be dismissed.
• B.These risks can be accepted.
• C.These risks can be added to a low priority risk watch list.
• D.All risks must have a valid, documented risk response.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important consideration when developing an organization's risk taxonomy?

• A.Regulatory requirements
• B.Business context
• C.IT strategy
• D.Leading industry frameworks

Comment: *

Name: *

Email: *

Verification: *

A payroll manager discovers that fields in certain payroll reports have been modified without authorization.
Which of the following control weaknesses could have contributed MOST to this problem?

• A.The programmer had access to the production programs.
• B.The user requirements were not documented.
• C.The programmer did not involve the user in testing.
• D.Payroll files were not under the control of a librarian

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important for an organization that wants to reduce IT operational risk?

• A.Increasing the frequency of data backups
• B.Decentralizing IT infrastructure
• C.Minimizing complexity of IT infrastructure
• D.Increasing senior management's understanding of IT operations

Comment: *

Name: *

Email: *

Verification: *