Which of the following statements are true for enterprise's risk management capability maturity level 3?

• A.Workflow tools are used to accelerate risk issues and track decisions
• B.The business knows how IT fits in the enterprise risk universe and the risk portfolio view
• C.The enterprise formally requires continuous improvement of risk management skills, based on clearly defined personal and enterprise goals
• D.Risk management is viewed as a business issue, and both the drawbacks and benefits of risk are recognized

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST defense against successful phishing attacks?

• A.Intrusion detection system
• B.Application hardening
• C.End-user awareness
• D.Spam filters

Comment: *

Name: *

Email: *

Verification: *

You work as a Project Manager for www.company.com Inc. You have to measure the probability, impact, and risk exposure. Then, you have to measure how the selected risk response can affect the probability and impact of the selected risk event. Which of the following tools will help you to accomplish the task?

• A.Project network diagrams
• B.Delphi technique
• C.Decision tree analysis
• D.Cause-and-effect diagrams

Comment: *

Name: *

Email: *

Verification: *

An organization has granted a vendor access to its data in order to analyze customer behavior. Which of the following would be the MOST effective control to mitigate the risk of customer data leakage?

• A.Enforce criminal background checks.
• B.Mask customer data fields.
• C.Require vendor to sign a confidentiality agreement.
• D.Restrict access to customer data on a "need to know'' basis.

Comment: *

Name: *

Email: *

Verification: *

Which of the following guidelines should be followed for effective risk management?
Each correct answer represents a complete solution. Choose three.

• A.Promote and support consistent performance in risk management
• B.Promote fair and open communication
• C.Focus on enterprise's objective
• D.Balance the costs and benefits of managing risk
• E.Explanation:
  The primary function of the enterprise is to meet its objective. Each business activity for fulfilling
  enterprise's objective carries both risk and opportunity, therefore objective should be considered
  while managing risk.
  Open and fair communication should me there for effective risk management. Open, accurate,
  timely and transparent information on lT risk is exchanged and serves as the basis for all risk-
  related decisions.
  Cost-benefit analysis should be done for proper weighing the total costs expected against the total
  benefits expected, which is the major aspect of risk management.

Comment: *

Name: *

Email: *

Verification: *