When an organization's disaster recovery plan has a reciprocal agreement, which of the following risk treatment options is being applied?

• A.Acceptance
• B.Transfer
• C.Avoidance
• D.Mitigation

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of HGT project. You are in the first phase of the risk response process and are doing following tasks :
Communicating risk analysis results Reporting risk management activities and the state of compliance
Interpreting independent risk assessment findings
Identifying business opportunities
Which of the following process are you performing?

• A.Articulating risk
• B.Mitigating risk
• C.Tracking risk
• D.Reporting risk
• E.Explanation:
  Articulating risk is the first phase in the risk response process to ensure that information on the
  true state of exposures and opportunities are made available in a timely manner and to the right
  people for appropriate response. Following are the tasks that are involved in articulating risk:
  Communicate risk analysis results.
  Report risk management activities and the state of compliance.
  Interpret independent risk assessment findings.
  Identify business opportunities.
• F.is incorrect. Risk mitigation attempts to reduce the probability of a risk event and its
  impacts to an acceptable level. Risk mitigation can utilize various forms of control carefully
  integrated together. This comes under risk response process and is latter stage after articulating
  risk.
• G.is incorrect. This is not related to risk response process. It is a type of risk. Reporting
  risks are the risks that are caused due to wrong reporting which leads to bad decision.

Comment: *

Name: *

Email: *

Verification: *

The MAIN purpose of reviewing a control after implementation is to validate that the control:

• A.is being monitored.
• B.operates as intended.
• C.meets regulatory requirements.
• D.operates efficiently.

Comment: *

Name: *

Email: *

Verification: *

What are the functions of audit and accountability control?
Each correct answer represents a complete solution. Choose all that apply.

• A.Provides details on how to protect the audit logs
• B.Implement effective access control
• C.Implement an effective audit program
• D.Provides details on how to determine what to audit
• E.Explanation:
  Audit and accountability family of controls helps an organization implement an effective audit program. It provides details on how to determine what to audit. It provides details on how to protect the audit logs. It also includes information on using audit logs for non-repudiation.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST helpful in aligning IT risk with business objectives?

• A.Performing a business impact analysis (BlA)
• B.Integrating the results of top-down risk scenario analyses
• C.Implementing a risk classification system
• D.Introducing an approved IT governance framework

Comment: *

Name: *

Email: *

Verification: *