Which of the following role carriers is accounted for analyzing risks, maintaining risk profile, and risk-aware decisions?

• A.Business management
• B.Business process owner
• C.Chief information officer (CIO)
• D.Chief risk officer (CRO)

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of the HJK Project for your organization. You and the project team have created risk responses for many of the risk events in the project. Where should you document the proposed responses and the current status of all identified risks?

• A.Stakeholder management strategy
• B.Lessons learned documentation
• C.Risk register
• D.Risk management plan
• E.Explanation:
  Risks and the corresponding responses are documented in the risk register for the project. Risk register is a document that contains the results of the qualitative risk analysis, quantitative risk analysis, and risk response planning. Description, category, cause, probability of occurring, impact on objectives, proposed responses, owner, and the current status of all identified risks are put in the risk register.

Comment: *

Name: *

Email: *

Verification: *

An external security audit has reported multiple findings related to control noncompliance. Which of the following would be MOST important for the risk practitioner to communicate to senior management?

• A.The impact to the organization's risk profile
• B.Suggestions for improving risk awareness training
• C.A recommendation for internal audit validation
• D.Plans for mitigating the associated risk

Comment: *

Name: *

Email: *

Verification: *

An organization has recently updated its disaster recovery plan (DRP). Which of the following would be the GREATEST risk if the new plan is not tested?

• A.Data privacy regulations may be violated.
• B.External resources may need to be involved.
• C.Recovery costs may increase significantly.
• D.Service interruptions may be longer than anticipated.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be considered to ensure that risk responses that are adopted are cost-effective and are aligned with business objectives?
Each correct answer represents a part of the solution. Choose three.

• A.Identify the risk in business terms
• B.Recognize the business risk appetite
• C.Adopt only pre-defined risk responses of business
• D.Follow an integrated approach in business

Comment: *

Name: *

Email: *

Verification: *