Which of the following is NOT true for effective risk communication?

• A.Risk information must be known and understood by all stakeholders.
• B.Use of technical terms of risk
• C.Any communication on risk must be relevant
• D.For each risk, critical moments exist between its origination and its potential business consequence

Correct Answer: B

Explanation/Reference:
Explanation:
For effective communication, information communicated should not inundate the recipients. All ground rules of good communication apply to communication on risk. This includes the avoidance of jargon and technical terms regarding risk because the intended audiences are generally not deeply technologically skilled. Hence use of technical terms is avoided for effective communication Incorrect Answers:
A, C, D: These all are true for effective risk communication. For effective risk communication the risk information should be clear, concise, useful and timely. Risk information must be known and understood by all the stakeholders. Information or communication should not overwhelm the recipients. This includes the avoidance of technical terms regarding risk because the intended audiences are generally not much technologically skilled.
Any communication on risk must be relevant. Technical information that is too detailed or is sent to inappropriate parties will hinder, rather than enable, a clear view of risk. For each risk, critical moments exist between its origination and its potential business consequence.
Information should also be aimed at the correct target audience and available on need-to-know basis.
Hence for effective risk communication risk information should be:
Clear

Concise

Useful

Timely given

Aimed at the correct audience

Available on need-to-know basis

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST measures the impact of business interruptions caused by an IT service outage?

• A.Duration of service outage
• B.Cost of remediation efforts
• C.Average time to recovery
• D.Sustained financial loss

Comment: *

Name: *

Email: *

Verification: *

What are the functions of audit and accountability control?
Each correct answer represents a complete solution. Choose all that apply.

• A.Provides details on how to protect the audit logs
• B.Implement effective access control
• C.Implement an effective audit program
• D.Provides details on how to determine what to audit
• E.Explanation:
  Audit and accountability family of controls helps an organization implement an effective audit program. It provides details on how to determine what to audit. It provides details on how to protect the audit logs. It also includes information on using audit logs for non-repudiation.

Comment: *

Name: *

Email: *

Verification: *

You work as a project manager for BlueWell Inc. You have declined a proposed change request because of the risk associated with the proposed change request. Where should the declined change request be documented and stored?

• A.Change request log
• B.Project archives
• C.Lessons learned
• D.Project document updates

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to communicate to senior management during the initial implementation of a risk management program?

• A.Best practices
• B.Desired risk level
• C.Risk ownership
• D.Regulatory compliance

Comment: *

Name: *

Email: *

Verification: *