You are working in an enterprise. You project deals with important files that are stored on the computer.
You have identified the risk of the failure of operations. To address this risk of failure, you have guided the system administrator sign off on the daily backup. This scenario is an example of which of the following?

• A.Risk avoidance
• B.Risk transference
• C.Risk acceptance
• D.Risk mitigation

Correct Answer: D

Explanation/Reference:
Explanation:
Mitigation is the strategy that provides for the definition and implementation of controls to address the risk described. Here in this scenario, you are trying to reduce the risk of operation failure by guiding administrator to take daily backup, hence it is risk mitigation.
Risk mitigation attempts to reduce the probability of a risk event and its impacts to an acceptable level.
Risk mitigation can utilize various forms of control carefully integrated together. The main control types are:
Managerial(e.g.,policies)

Technical (e.g., tools such as firewalls and intrusion detection systems)

Operational (e.g., procedures, separation of duties)

Preparedness activities

Incorrect Answers:
A: The scenario does not describe risk avoidance. Avoidance is a strategy that provides for not implementing certain activities or processes that would incur risk.
B: The scenario does not describe the sharing of risk. Transference is the strategy that provides for sharing risk with partners or taking insurance coverage.
C: The scenario does not describe risk acceptance, Acceptance is a strategy that provides for formal acknowledgment of the existence of a risk and the monitoring of that risk.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST method to ensure a terminated employee's access to IT systems is revoked upon departure from the organization?

• A.Login attempts are reconciled to a list of terminated employees.
• B.The human resources (HR) system automatically revokes system access.
• C.A list of terminated employees is generated for reconciliation against current IT access.
• D.A process to remove employee access during the exit interview is implemented.

Comment: *

Name: *

Email: *

Verification: *

David is the project manager of HRC project. He concluded while HRC project is in process that if he adopts e- commerce, his project can be more fruitful. But he did not engage in electronic commerce (e-commerce) so that he would escape from risk associated with that line of business. What type of risk response had he adopted?

• A.Acceptance
• B.Avoidance
• C.Exploit
• D.Enhance

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to understand when developing key risk indicators (KRIs)?

• A.Integrity of the source data
• B.Control environment
• C.Stakeholder requirements
• D.KRI thresholds

Comment: *

Name: *

Email: *

Verification: *

When formulating a social media policy lo address information leakage, which of the following is the MOST important concern to address?

• A.Sharing company information on social media
• B.Using social media to maintain contact with business associates
• C.Using social media for personal purposes during working hours
• D.Sharing personal information on social media

Comment: *

Name: *

Email: *

Verification: *