Which of the following elements of a risk register is MOST likely to change as a result of change in management's risk appetite?

• A.Risk likelihood and impact
• B.Risk velocity
• C.Inherent risk
• D.Key risk indicator (KRI) thresholds

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to assess the effectiveness of an access management process?

• A.Reviewing access logs for user activity
• B.Comparing the actual process with the documented process
• C.Reconciling a list of accounts belonging to terminated employees
• D.Reviewing for compliance with acceptable use policy

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST evidence that risk management is driving business decisions in an organization?

• A.Risk treatment options receive adequate funding.
• B.Residual risk is within risk tolerance.
• C.Risk ownership is identified and assigned.
• D.Compliance breaches are addressed in a timely manner.

Comment: *

Name: *

Email: *

Verification: *

You and your project team have identified a few risk events in the project and recorded the events in the risk register. Part of the recording of the events includes the identification of a risk owner. Who is a risk owner?

• A.A risk owner is the party that will monitor the risk events.
• B.A risk owner is the party that will pay for the cost of the risk event if it becomes an issue.
• C.A risk owner is the party that has caused the risk event.
• D.A risk owner is the party authorized to respond to the risk event.

Comment: *

Name: *

Email: *

Verification: *

Which of the following controls is an example of non-technical controls?

• A.Access control
• B.Physical security
• C.Intrusion detection system
• D.Encryption

Comment: *

Name: *

Email: *

Verification: *