Which of the following BEST enables a risk practitioner to enhance understanding of risk among stakeholders?

• A.Threat analysis
• B.Key risk indicators
• C.Risk scenarios
• D.Business impact analysis

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of a project in Bluewell Inc. You and your project team have identified several project risks, completed risk analysis, and are planning to apply most appropriate risk responses. Which of the following tools would you use to choose the appropriate risk response?

• A.Project network diagrams
• B.Cause-and-effect analysis
• C.Decision tree analysis
• D.Delphi Technique

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important reason to link an effective key control indicator (KCI) to relevant key risk indicators (KRIs)?

• A.To provide input to management for the adjustment of risk appetite
• B.To monitor changes in the risk environment
• C.To monitor the accuracy of threshold levels in metrics
• D.To obtain business buy-in for investment in risk mitigation measures

Comment: *

Name: *

Email: *

Verification: *

An organization is considering outsourcing user administration controls for a critical system. The potential vendor has offered to perform quarterly self-audits of its controls instead of having annual independent audits.
Which of the following should be of GREATEST concern to the risk practitioner?

• A.The vendor will not achieve best practices
• B.The vendor will not ensure against control failure
• C.The controls may not be properly tested
• D.Lack of a risk-based approach to access control

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST critical when designing controls?

• A.Involvement of process owner
• B.Involvement of internal audit
• C.Identification of key risk indicators
• D.Quantitative impact of the risk

Comment: *

Name: *

Email: *

Verification: *