Which of the following is the FIRST step in managing the risk associated with the leakage of confidential data?

• A.Conduct an awareness program for data owners and users
• B.Maintain and review the classified data inventory
• C.Implement mandatory encryption on data
• D.Define and implement a data classification policy

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be management's PRIMARY consideration when approving risk response action plans?

• A.Prioritization for implementing the action plans
• B.Ability of the action plans to address multiple risk scenarios
• C.Ease of implementing the risk treatment solution
• D.Changes in residual risk after implementing the plans

Comment: *

Name: *

Email: *

Verification: *

An organization has decided to use an external auditor to review the control environment of an outsourced service provider. The BEST control criteria to evaluate the provider would be based on:

• A.the service provider's existing controls
• B.a recognized industry control framework
• C.guidance provided by the external auditor
• D.The organization's specific control requirements

Comment: *

Name: *

Email: *

Verification: *

Which of the following establishes mandatory rules, specifications and metrics used to measure compliance against quality, value, etc?

• A.Framework
• B.Legal requirements
• C.Standard
• D.Practices
• E.Explanation:
  Standard establishes mandatory rules, specifications and metrics used to measure compliance against quality, value, etc. Standards are usually intended for compliance purposes and to provide assurance to others who interact with a process or outputs of a process.

Comment: *

Name: *

Email: *

Verification: *

Which of the following methods involves the use of predictive or diagnostic analytical tool for exposing risk factors?

• A.Scenario analysis
• B.Sensitivity analysis
• C.Fault tree analysis
• D.Cause and effect analysis
• E.Explanation:
  Cause-and-effect analysis involves the use of predictive or diagnostic analytical tool for exploring the root causes or factors that contribute to positive or negative effects or outcomes. These tools also help in identifying potential risk.

Comment: *

Name: *

Email: *

Verification: *