Before implementing instant messaging within an organization using a public solution, which of the following should be in place to mitigate data leakage risk?

• A.An access control list
• B.A data extraction tool
• C.An acceptable usage policy
• D.An intrusion detection system (IDS)

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST useful when measuring the progress of a risk response action plan?

• A.Resource expenditure against budget
• B.An up-to-date risk register
• C.Percentage of mitigated risk scenarios
• D.Annual loss expectancy (ALE) changes

Comment: *

Name: *

Email: *

Verification: *

A control owner has completed a year-long project To strengthen existing controls. It is MOST important for the risk practitioner to:

• A.ensure risk monitoring for the project is initiated.
• B.conduct and document a business impact analysis (BIA).
• C.update the risk register to reflect the correct level of residual risk.
• D.verify cost-benefit of the new controls betng implemented.

Comment: *

Name: *

Email: *

Verification: *

You and your project team have identified a few risk events in the project and recorded the events in the risk register. Part of the recording of the events includes the identification of a risk owner. Who is a risk owner?

• A.A risk owner is the party that will monitor the risk events.
• B.A risk owner is the party that will pay for the cost of the risk event if it becomes an issue.
• C.A risk owner is the party that has caused the risk event.
• D.A risk owner is the party authorized to respond to the risk event.

Comment: *

Name: *

Email: *

Verification: *

When does the Identify Risks process take place in a project?

• A.At the Planning stage.
• B.At the Executing stage.
• C.At the Initiating stage.
• D.Throughout the project life-cycle.

Comment: *

Name: *

Email: *

Verification: *