Which of the following risk register updates is MOST important for senior management to review?

• A.Avoiding a risk that was previously accepted
• B.Extending the date of a future action plan by two months
• C.Retiring a risk scenario no longer used
• D.Changing a risk owner

Comment: *

Name: *

Email: *

Verification: *

While reviewing a contract of a cloud services vendor, it was discovered that the vendor refuses to accept liability for a sensitive data breach. Which of the following controls will BES reduce the risk associated with such a data breach?

• A.Ensuring the vendor does not know the encryption key
• B.Using field-level encryption with a vendor supplied key
• C.Engaging a third party to validate operational controls
• D.Using the same cloud vendor as a competitor

Comment: *

Name: *

Email: *

Verification: *

Which of the following roles would provide the MOST important input when identifying IT risk scenarios?

• A.Operational risk managers
• B.Internal auditors
• C.Information security managers
• D.Business process owners

Comment: *

Name: *

Email: *

Verification: *

An identified high probability risk scenario involving a critical, proprietary business function has an annualized cost of control higher than the annual loss expectancy. Which of the following is the BEST risk response?

• A.Avoid
• B.Transfer
• C.Accept
• D.Mitigate

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST help to address the risk associated with malicious outsiders modifying application data?

• A.Role-based access controls
• B.Multi-factor authentication
• C.Activation of control audits
• D.Acceptable use policies

Comment: *

Name: *

Email: *

Verification: *