Which of the following BEST indicates effective information security incident management?

• A.Average time to identify critical information security incidents
• B.Frequency of information security incident response plan testing
• C.Percentage of high risk security incidents
• D.Monthly trend of information security-related incidents

Comment: *

Name: *

Email: *

Verification: *

A bank recently incorporated Blockchain technology with the potential to impact known risk within the organization. Which of the following is the risk practitioner's BEST course of action?

• A.Analyze the risk and update the risk register as needed.
• B.Conduct testing of the control that mitigate the existing risk.
• C.Determine whether risk responses are still adequate.
• D.Analyze and update control assessments with the new processes.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements in an organization's current risk profile report is cause for further action by senior management?

• A.Key performance indicator (KPI) trend data is incomplete.
• B.New key risk indicators (KRIs) have been established.
• C.Key risk indicators (KRIs) are lagging.
• D.Key performance indicators (KPIs) are outside of targets.

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the MOST important information to facilitate a risk response decision?

• A.Risk appetite.
• B.Industry best practices.
• C.Key risk indicators.
• D.Audit findings.

Comment: *

Name: *

Email: *

Verification: *

Your project is an agricultural-based project that deals with plant irrigation systems. You have discovered a byproduct in your project that your organization could use to make a profit. If your organization seizes this opportunity it would be an example of what risk response?

• A.Enhancing
• B.Positive
• C.Opportunistic
• D.Exploiting
• E.Explanation:
  This is an example of exploiting a positive risk - a by-product of a project is an excellent example of exploiting a risk. Exploit response is one of the strategies to negate risks or threats that appear in a project. This strategy may be selected for risks with positive impacts where the organization wishes to ensure that the opportunity is realized. Exploiting a risk event provides opportunities for positive impact on a project. Assigning more talented resources to the project to reduce the time to completion is an example of exploit response.

Comment: *

Name: *

Email: *

Verification: *