Which of the following is the PRIMARY objective for automating controls?

• A.Improving control process efficiency
• B.Reducing the need for audit reviews
• C.Facilitating continuous control monitoring
• D.Complying with functional requirements

Comment: *

Name: *

Email: *

Verification: *

Which of the following will BEST support management repotting on risk?

• A.Risk policy requirements
• B.A risk register
• C.Key performance Indicators
• D.Control self-assessment

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST concern associated with redundant data in an organization's inventory system?

• A.Poor access control
• B.Data inconsistency
• C.Unnecessary costs of program changes
• D.Unnecessary data storage usage

Comment: *

Name: *

Email: *

Verification: *

What are the responsibilities of the CRO?
Each correct answer represents a complete solution. Choose three.

• A.Managing the risk assessment process
• B.Implement corrective actions
• C.Advising Board of Directors
• D.Managing the supporting risk management function

Correct Answer: A,B,D

Explanation/Reference:
Explanation:
Chief Risk Officer is the executive-level manager in an organization. They provide corporate, guidance, governance, and oversight over the enterprise's risk management activities. The main priority for the CRO is to ensure that the organization is in full compliance with applicable regulations. They may also deal with areas regarding insurance, internal auditing, corporate investigations, fraud, and information security.
CRO's responsibilities include:
Managing the risk assessment process

Implementation of corrective actions

Communicate risk management issues

Supporting the risk management functions

Comment: *

Name: *

Email: *

Verification: *

During an IT risk scenario review session, business executives question why they have been assigned ownership of IT-related risk scenarios. They feel IT risk is technical in nature and therefore should be owned by IT. Which of the following is the BEST way for the risk practitioner to address these concerns?

• A.Recommend the formation of an executive risk council to oversee IT risk
• B.Provide an estimate of IT system downtime if IT risk materializes
• C.Describe IT risk scenarios in terms of business risk
• D.Educate business executives on IT risk concepts

Comment: *

Name: *

Email: *

Verification: *