Which of the following is the MOST important enabler of effective risk management?

• A.Continuous monitoring of threats and vulnerabilities
• B.Senior management support
• C.Implementation of proper controls
• D.User awareness of policies and procedures

Comment: *

Name: *

Email: *

Verification: *

Reviewing results from which of the following is the BEST way to identify information systems control deficiencies?

• A.Control self-assessment (CSA)
• B.User acceptance testing (UAT)
• C.Control remediation planning
• D.Vulnerability and threat analysis

Comment: *

Name: *

Email: *

Verification: *

Which of the following would provide the MOST objective assessment of the effectiveness of an organization's security controls?

• A.A third-party audit
• B.An internal audit
• C.Internal penetration testing
• D.Security operations center review

Comment: *

Name: *

Email: *

Verification: *

During a control review, the control owner states that an existing control has deteriorated over time. What is the BEST recommendation to the control owner?

• A.Escalate the issue to senior management
• B.Implement compensating controls to reduce residual risk
• C.Certify the control after documenting the concern.
• D.Discuss risk mitigation options with the risk owner.

Comment: *

Name: *

Email: *

Verification: *

What is the PRIMARY objective difference between an internal and an external risk management assessment reviewer?

• A.In quality of work
• B.In ease of access
• C.In profession
• D.In independence

Comment: *

Name: *

Email: *

Verification: *