To implement the MOST effective monitoring of key risk indicators (KRIs), which of the following needs to be in place?

• A.Automated data feed
• B.Controls monitoring
• C.Escalation procedures
• D.Threshold definition

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST enables the risk profile to serve as an effective resource to support business objectives?

• A.Engaging external risk professionals to periodically review the risk
• B.Prioritizing global standards over local requirements in the risk profile
• C.Updating the risk profile with risk assessment results
• D.Assigning quantitative values to qualitative metrics in the risk register

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the MOST up-to-date information about the effectiveness of an organization's overall IT control environment?

• A.Key performance indicators (KPIs)
• B.Risk heat maps
• C.Periodic penetration testing
• D.Internal audit findings

Comment: *

Name: *

Email: *

Verification: *

You are a project manager for your organization and you're working with four of your key stakeholders.
One of the stakeholders is confused as to why you're not discussing the current problem in the project during the risk identification meeting. Which one of the following statements best addresses when a project risk actually happens?

• A.Project risks are uncertain as to when they will happen.
• B.Risks can happen at any time in the project.
• C.Project risks are always in the future.
• D.Risk triggers are warning signs of when the risks will happen.

Comment: *

Name: *

Email: *

Verification: *

Numerous media reports indicate a recently discovered technical vulnerability is being actively exploited. Which of the following would be the BEST response to this scenario?

• A.Reassess the inherent risk of the target.
• B.Assess the vulnerability management process.
• C.Conduct a vulnerability assessment.
• D.Conduct a control serf-assessment.

Comment: *

Name: *

Email: *

Verification: *