Participants in a risk workshop have become focused on the financial cost to mitigate risk rather than choosing the most appropriate response. Which of the following is the BEST way to address this type of issue in the long term?

• A.Raise the maturity of organizational risk management.
• B.Calculate annualized loss expectancy of risk scenarios.
• C.Review the risk register and risk scenarios.
• D.Perform a return on investment analysis.

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the MOST useful information when developing a risk profile for management approval?

• A.Strength of detective and preventative controls
• B.Effectiveness and efficiency of controls
• C.Inherent risk and risk tolerance
• D.Residual risk and risk appetite

Comment: *

Name: *

Email: *

Verification: *

What activity should be done for effective post-implementation reviews during the project?

• A.Establish the business measurements up front
• B.Allow a sufficient number of business cycles to be executed in the new system
• C.Identify the information collected during each stage of the project
• D.Identify the information to be reviewed

Comment: *

Name: *

Email: *

Verification: *

From a risk management perspective, the PRIMARY objective of using maturity models is to enable:

• A.solution delivery
• B.strategic alignment
• C.resource utilization
• D.performance evaluation

Comment: *

Name: *

Email: *

Verification: *

An organization is participating in an industry benchmarking study that involves providing customer transaction records for analysis Which of the following is the MOST important control to ensure the privacy of customer information?

• A.Data anonymization
• B.Data encryption
• C.Data cleansing
• D.Nondisclosure agreements (NDAs)

Comment: *

Name: *

Email: *

Verification: *