A maturity model will BEST indicate:

• A.availability and reliability.
• B.confidentiality and integrity.
• C.certification and accreditation.
• D.effectiveness and efficiency.

Comment: *

Name: *

Email: *

Verification: *

An organization has identified that terminated employee accounts are not disabled or deleted within the time required by corporate policy. Unsure of the reason, the organization has decided to monitor the situation for three months to obtain more information. As a result of this decision, the risk has been:

• A.accepted.
• B.mitigated.
• C.avoided.
• D.transferred.

Comment: *

Name: *

Email: *

Verification: *

After recent updates to the risk register, management has requested that the overall level of residual risk be reduced. Which of the following is the risk practitioner's BEST course of action?

• A.Prioritize remediation plans.
• B.Recommend the acceptance of low-level risk.
• C.Develop new risk action plans with risk owners.
• D.Implement additional controls.

Comment: *

Name: *

Email: *

Verification: *

The BEST method to align an organization's business continuity plan (BCP) and disaster recovery plan (DRP) with core business needs to:

• A.outsource the maintenance of the BCP and DRP to a third party
• B.include BCP and DRP responsibilities as part of the new employee training
• C.execute periodic walk-throughs of the BCP and DRP
• D.update the business impact analysis (BIA) for significant business changes

Comment: *

Name: *

Email: *

Verification: *

Which of the following process ensures that the risk response strategy remains active and that proposed controls are implemented according to schedule?

• A.Risk management
• B.Risk response integration
• C.Risk response implementation
• D.Risk response tracking

Comment: *

Name: *

Email: *

Verification: *