Which of the following is the MOST important outcome of reviewing the risk management process?

• A.Improving the competencies of employees who performed the review
• B.Assuring the risk profile supports the IT objectives
• C.Determining what changes should be made to IS policies to reduce risk
• D.Determining that procedures used in risk assessment are appropriate

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective way to mitigate identified risk scenarios?

• A.Document the risk tolerance of the organization.
• B.Assign ownership of the risk response plan.
• C.Provide awareness in early detection of risk.
• D.Perform periodic audits on identified risk areas.

Comment: *

Name: *

Email: *

Verification: *

When an organization's disaster recovery plan has a reciprocal agreement, which of the following risk treatment options is being applied?

• A.Mitigation
• B.Transfer
• C.Avoidance
• D.Acceptance

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be done FIRST when developing a data protection management plan?

• A.Perform a cost-benefit analysis.
• B.Establish a data inventory.
• C.Identify critical data.
• D.Conduct a risk analysis.

Comment: *

Name: *

Email: *

Verification: *

Which of the following operational risks ensures that the provision of a quality product is not overshadowed by the production costs of that product?

• A.Information security risks
• B.Contract and product liability risks
• C.Project activity risks
• D.Profitability operational risks

Comment: *

Name: *

Email: *

Verification: *