Which of the following is the PRIMARY requirement before choosing Key performance indicators of an enterprise?

• A.Determine size and complexity of the enterprise
• B.Prioritize various enterprise processes
• C.Determine type of market in which the enterprise operates
• D.Enterprise must establish its strategic and operational goals

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important objective of the information system control?

• A.Business objectives are achieved and undesired risk events are detected and corrected
• B.Ensuring effective and efficient operations
• C.Developing business continuity and disaster recovery plans
• D.Safeguarding assets

Correct Answer: A

Explanation/Reference:
Explanation:
The basic purpose of Information System control in an organization is to ensure that the business objectives are achieved and undesired risk events are detected and corrected. Some of the IS control objectives are given below:
Safeguarding assets

Assuring integrity of sensitive and critical application system environments

Assuring integrity of general operating system

Ensuring effective and efficient operations

Fulfilling user requirements, organizational policies and procedures, and applicable laws and

regulations
Changing management

Developing business continuity and disaster recovery plans

Developing incident response and handling plans

Hence the most important objective is to ensure that business objectives are achieved and undesired risk events are detected and corrected.
Incorrect Answers:
B, C, D: These are also the objectives of the information system control but are not the best answer.

Comment: *

Name: *

Email: *

Verification: *

Wendy has identified a risk event in her project that has an impact of $75,000 and a 60 percent chance of happening. Through research, her project team learns that the risk impact can actually be reduced to just
$15,000 with only a ten percent chance of occurring. The proposed solution will cost $25,000. Wendy agrees to the $25,000 solution. What type of risk response is this?

• A.Mitigation
• B.Avoidance
• C.Transference
• D.Enhancing

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST helpful in preventing risk events from materializing?

• A.Prioritizing and tracking issues
• B.Maintaining the risk register
• C.Establishing key risk indicators (KRIs)
• D.Reviewing and analyzing security incidents

Comment: *

Name: *

Email: *

Verification: *

A risk assessment indicates the residual risk associated with a new bring your own device (BYOD) program is within organizational risk tolerance. Which of the following should the risk practitioner recommend be done NEXT?

• A.Implement targeted awareness training for new BYOD users.
• B.Implement monitoring to detect control deterioration.
• C.Identify log sources to monitor BYOD usage and risk impact.
• D.Reduce the risk tolerance level.

Comment: *

Name: *

Email: *

Verification: *