In an organization dependent on data analytics to drive decision-making, which of the following would BEST help to minimize the risk associated with inaccurate data?

• A.Establishing an intellectual property agreement
• B.Benchmarking to industry best practice
• C.Evaluating each of the data sources for vulnerabilities
• D.Periodically reviewing big data strategies

Comment: *

Name: *

Email: *

Verification: *

A teaming agreement is an example of what type of risk response?

• A.Acceptance
• B.Mitigation
• C.Transfer
• D.Share

Comment: *

Name: *

Email: *

Verification: *

An IT department has organized training sessions to improve user awareness of organizational information security policies. Which of the following is the BEST key performance indicator (KPI) to reflect effectiveness of the training?

• A.Number of training sessions completes
• B.Percentage of staff members who attend the training with positive feedback
• C.Percentage of staff members who complete the training with a passing score
• D.Percentage of attendees versus total staff

Comment: *

Name: *

Email: *

Verification: *

A risk practitioner learns that the organization s industry is experiencing a trend of rising security incidents. Which of the following is the BEST course of action?

• A.Review past internal audit results.
• B.Respond to organizational security threats.
• C.Research industry published studies.
• D.Evaluate the relevance of the evolving threats.

Comment: *

Name: *

Email: *

Verification: *

Who is the MOST appropriate owner for newly identified IT risk?

• A.The manager responsible for IT operations that will support the risk mitigation efforts
• B.The individual with authority to commit organizational resources to mitigate the risk
• C.A project manager capable of prioritizing the risk remediation efforts
• D.The individual with the most IT risk-related subject matter knowledge

Comment: *

Name: *

Email: *

Verification: *