Henry is the project sponsor of the JQ Project and Nancy is the project manager. Henry has asked Nancy to start the risk identification process for the project, but Nancy insists that the project team be involved in the process. Why should the project team be involved in the risk identification?

• A.So that the project team can develop a sense of ownership for the risks and associated risk responsibilities.
• B.So that the project manager can identify the risk owners for the risks within the project and the needed risk responses.
• C.So that the project manager isn't the only person identifying the risk events within the project.
• D.So that the project team and the project manager can work together to assign risk ownership.

Comment: *

Name: *

Email: *

Verification: *

Which of the following controls would BEST reduce the likelihood of a successful network attack through social engineering?

• A.Multifactor authentication
• B.Security awareness training
• C.Employee sanctions
• D.Automated controls

Comment: *

Name: *

Email: *

Verification: *

Reviewing results from which of the following is the BEST way to identify information systems control deficiencies?

• A.Control self-assessment (CSA)
• B.Vulnerability and threat analysis
• C.User acceptance testing (UAT)
• D.Control remediation planning

Comment: *

Name: *

Email: *

Verification: *

Which of the following risk register updates is MOST important for senior management to review?

• A.Avoiding a risk that was previously accepted
• B.Extending the date of a future action plan by two months
• C.Retiring a risk scenario no longer used
• D.Changing a risk owner

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST enables the identification of trends in risk levels?

• A.Measurements for key risk indicators (KRIs) are repeatable
• B.Correlation between risk levels and key risk indicators (KRIs) is positive.
• C.Quantitative measurements are used for key risk indicators (KRIs).
• D.Qualitative definitions for key risk indicators (KRIs) are used.

Comment: *

Name: *

Email: *

Verification: *