You are the project manager of HJT project. You want to measure the operational effectiveness of risk management capabilities. Which of the following is the BEST option to measure the operational effectiveness?

• A.Key risk indicators
• B.Capability maturity models
• C.Key performance indicators
• D.Metric thresholds
• E.Explanation:
  Key performance indicators are a set of quantifiable measures that a company or industry uses to gauge or compare performance in terms of meeting their strategic and operational goals. Key performance indicators (KPIs) provide insights into the operational effectiveness of the concept or capability that they monitor.

Comment: *

Name: *

Email: *

Verification: *

When developing IT risk scenarios, it is CRITICAL to involve:

• A.process owners
• B.internal auditors
• C.senior management
• D.IT managers

Comment: *

Name: *

Email: *

Verification: *

Stephen is the project manager of the GBB project. He has worked with two subject matter experts and his project team to complete the risk assessment technique. There are approximately 47 risks that have a low probability and a low impact on the project. Which of the following answers best describes what Stephen should do with these risk events?

• A.Because they are low probability and low impact, Stephen should accept the risks.
• B.The low probability and low impact risks should be added to a watchlist for future monitoring.
• C.Because they are low probability and low impact, the risks can be dismissed.
• D.The low probability and low impact risks should be added to the risk register.

Comment: *

Name: *

Email: *

Verification: *

The BEST way to test the operational effectiveness of a data backup procedure is to:

• A.demonstrate a successful recovery from backup files.
• B.conduct an audit of files stored offsite.
• C.inspect a selection of audit trails and backup logs.
• D.interview employees to compare actual with expected procedures.

Comment: *

Name: *

Email: *

Verification: *

The only output of qualitative risk analysis is risk register updates. When the project manager updates the risk register he will need to include several pieces of information including all of the following except for which one?

• A.Trends in qualitative risk analysis
• B.Risk probability-impact matrix
• C.Risks grouped by categories
• D.Watchlist of low-priority risks

Comment: *

Name: *

Email: *

Verification: *