Which of the following is MOST commonly compared against the risk appetite?

• A.IT risk
• B.Inherent risk
• C.Residual risk
• D.Financial risk

Comment: *

Name: *

Email: *

Verification: *

Which of the following would require updates to an organization's IT risk register?

• A.Discovery of an ineffectively designed key IT control
• B.Management review of key risk indicators (KRls)
• C.Changes to the team responsible for maintaining the register
• D.Completion of the latest internal audit

Comment: *

Name: *

Email: *

Verification: *

An IT risk practitioner has been asked to regularly report on the overall status and effectiveness of the IT risk management program. Which of the following is MOST useful for this purpose?

• A.Capability maturity level
• B.Balanced scorecard
• C.Control self-assessment (CSA)
• D.Internal audit plan

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST concern associated with the transmission of healthcare data across the internet?

• A.Data integrity
• B.Low bandwidth connections
• C.Unencrypted data
• D.Lack of redundant circuits

Comment: *

Name: *

Email: *

Verification: *

A business manager wants to leverage an existing approved vendor solution from another area within the organization. Which of the following is the risk practitioner's BEST course of action?

• A.Assess the risk associated with the new use case.
• B.Request revalidation of the original use case.
• C.Request a new third-party review.
• D.Recommend allowing the new usage based on prior approval.

Comment: *

Name: *

Email: *

Verification: *