During a control review, the control owner states that an existing control has deteriorated over time. What is the BEST recommendation to the control owner?

• A.Escalate the issue to senior management
• B.Discuss risk mitigation options with the risk owner
• C.Certify the control after documenting the concern
• D.Implement compensating controls to reduce residual risk

Comment: *

Name: *

Email: *

Verification: *

Which negative risk response usually has a contractual agreement?

• A.Sharing
• B.Transference
• C.Mitigation
• D.Exploiting

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST supports the communication of risk assessment results to stakeholders?

• A.Classification of risk profiles
• B.Periodic review of the risk register
• C.Assignment of risk ownership
• D.Monitoring of high-risk areas

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements in an organization's current risk profile report is cause for further action by senior management?

• A.Key risk indicators (KRIs) are lagging.
• B.New key risk indicators (KRIs) have been established.
• C.Key performance indicator (KPI) trend data is incomplete.
• D.Key performance indicators (KPIs) are outside of targets.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the final step in the policy development process?

• A.Management approval
• B.Continued awareness activities
• C.Communication to employees
• D.Maintenance and review

Comment: *

Name: *

Email: *

Verification: *