Which of the following is the MOST important consideration for protecting data assets m a Business application system?

• A.Encrypted communication is established between applications and data servers
• B.Offsite encrypted backups are automatically created by the application
• C.Application controls are aligned with data classification lutes
• D.Application users are periodically trained on proper data handling practices

Comment: *

Name: *

Email: *

Verification: *

What are the two MAJOR factors to be considered while deciding risk appetite level? Each correct answer represents a part of the solution. Choose two.

• A.The amount of loss the enterprise wants to accept
• B.Alignment with risk-culture
• C.Risk-aware decisions
• D.The capacity of the enterprise's objective to absorb loss.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important consideration when developing an organization's risk taxonomy?

• A.IT strategy
• B.Leading industry frameworks
• C.Business context
• D.Regulatory requirements

Comment: *

Name: *

Email: *

Verification: *

The risk associated with an asset before controls are applied can be expressed as:

• A.the likelihood of a given threat.
• B.the magnitude of an impact.
• C.a function of the likelihood and impact.
• D.a function of the cost and effectiveness of controls.

Comment: *

Name: *

Email: *

Verification: *

An organization is considering acquiring a new line of business and wants to develop new IT risk scenarios to guide its decisions. Which of the following would add the MOST value to the new risk scenarios?

• A.Audit findings
• B.Expected losses
• C.Cost-benefit analysis
• D.Organizational threats

Comment: *

Name: *

Email: *

Verification: *