Which of the following is of GREATEST concern when uncontrolled changes are made to the control environment?

• A.A decrease in control layering effectiveness
• B.An increase in inherent risk
• C.An increase in the level of residual risk
• D.An increase in control vulnerabilities

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST indicator of the effectiveness of a control action plan's implementation?

• A.Increased risk appetite
• B.Increased number of controls
• C.Reduced risk level
• D.Stakeholder commitment

Comment: *

Name: *

Email: *

Verification: *

An organization is considering acquiring a new line of business and wants to develop new IT risk scenarios to guide its decisions. Which of the following would add the MOST value to the new risk scenarios?

• A.Audit findings
• B.Expected losses
• C.Cost-benefit analysis
• D.Organizational threats

Comment: *

Name: *

Email: *

Verification: *

What activity should be done for effective post-implementation reviews during the project?

• A.Establish the business measurements up front
• B.Allow a sufficient number of business cycles to be executed in the new system
• C.Identify the information collected during each stage of the project
• D.Identify the information to be reviewed

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the PRIMARY focus of an IT risk awareness program?

• A.Cultivate long-term behavioral change
• B.Demonstrate regulatory compliance
• C.Ensure compliance with the organization's internal policies
• D.Communicate IT risk policy to the participants

Comment: *

Name: *

Email: *

Verification: *