Which of the following is the PRIMARY reason to have the risk management process reviewed by a third party?

• A.Validate the threat management process.
• B.Ensure the risk profile is defined and communicated.
• C.Obtain objective assessment of the control environment.
• D.Obtain an objective view of process gaps and systemic errors.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST measures the operational effectiveness of risk management capabilities?

• A.Capability maturity models (CMMs)
• B.Metric thresholds
• C.Key risk indicators (KRIs)
• D.Key performance indicators (KPIs)

Comment: *

Name: *

Email: *

Verification: *

What is the PRIMARY need for effectively assessing controls?

• A.Control's alignment with operating environment
• B.Control's design effectiveness
• C.Control's objective achievement
• D.Control's operating effectiveness

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST enables a proactive approach to minimizing the potential impact of unauthorized data disclosure?

• A.Cyber insurance
• B.Incident response plan
• C.Key risk indicators (KRIs)
• D.Data backups

Comment: *

Name: *

Email: *

Verification: *

A risk owner has accepted a high-impact risk because the control was adversely affecting process efficiency. Before updating the risk register, it is MOST important for the risk practitioner to:

• A.ensure suitable insurance coverage is purchased.
• B.obtain approval from senior management.
• C.negotiate with the risk owner on control efficiency.
• D.reassess the risk to confirm the impact.

Comment: *

Name: *

Email: *

Verification: *