Which of the following is MOST useful when communicating risk to management?

• A.Maturity model
• B.Risk map
• C.Audit report
• D.Risk policy

Comment: *

Name: *

Email: *

Verification: *

An organization practices the principle of least privilege. To ensure access remains appropriate, application owners should be required to review user access rights on a regular basis by obtaining:

• A.documentation indicating the intended users of the application
• B.an access control matrix and approval from the user's manager
• C.business purpose documentation and software license counts
• D.security logs to determine the cause of invalid login attempts

Comment: *

Name: *

Email: *

Verification: *

A change management process has recently been updated with new testing procedures. The NEXT course of action is to:

• A.communicate to those who test and promote changes
• B.assess the maturity of the change management process
• C.conduct a cost-benefit analysis to justify the cost of the control
• D.monitor processes to ensure recent updates are being followed

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST mitigates the risk of violating privacy laws when transferring personal information lo a supplier?

• A.Utilize blockchain during the data transfer
• B.Require independent audits of the supplier's control environment
• C.Encrypt the data while in transit lo the supplier
• D.Contractually obligate the supplier to follow privacy laws.

Comment: *

Name: *

Email: *

Verification: *

You are the risk professional in Bluewell Inc. A risk is identified and enterprise wants to quickly implement control by applying technical solution that deviates from the company's policies. What you should do?

• A.Recommend against implementation because it violates the company's policies
• B.Recommend revision of the current policy
• C.Recommend a risk assessment and subsequent implementation only if residual risk is accepted
• D.Conduct a risk assessment and allow or disallow based on the outcome

Comment: *

Name: *

Email: *

Verification: *