Which of the following is the MOST important consideration when determining whether to accept residual risk after security controls have been implemented on a critical system?

• A.Cost of the information control system.
• B.Cost versus benefit of additional mitigating controls.
• C.Annualized loss expectancy (ALE) for the system.
• D.Frequency of business impact.

Comment: *

Name: *

Email: *

Verification: *

Tom works as a project manager for BlueWell Inc. He is determining which risks can affect the project. Which of the following inputs of the identify risks process is useful in identifying risks, and provides a quantitative assessment of the likely cost to complete the scheduled activities?

• A.Activity duration estimates
• B.Risk management plan
• C.Cost management plan
• D.Activity cost estimates

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the BEST measurement of an organization's risk management maturity level?

• A.The results of a gap analysis
• B.IT alignment to business objectives
• C.Level of residual risk
• D.Key risk indicators (KRIs)

Comment: *

Name: *

Email: *

Verification: *

What is the IMMEDIATE step after defining set of risk scenarios?

• A.Risk mitigation
• B.Risk monitoring
• C.Risk management
• D.Risk analysis
• E.Explanation:
  Once the set of risk scenarios is defined, it can be used for risk analysis. In risk analysis, likelihood and impact of the scenarios are assessed. Important components of this assessment are the risk factors.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important requirement for monitoring key risk indicators (KRls) using log analysis?

• A.Obtaining logs m an easily readable format
• B.Collecting logs from the entire set of IT systems
• C.implementing an automated log analysis tool
• D.Providing accurate logs m a timely manner

Comment: *

Name: *

Email: *

Verification: *