The control manager needs to associate an existing test plan to an additional assessment type,Audit Test. The existing test plan is associated only with the Design Review assessment type.
How can this be accomplished?

• A.The control manager should create a new test plan with Audit Test and Design Review as assessment types.
• B.The control's testplan should be updated to include both Audit Test and Design Review as assessment types.
• C.The control's test plan should be updated to Audit Test as the assessment type.
• D.The control manager does not need to update the control because any initiated assessment will include all control test plans.

Comment: *

Name: *

Email: *

Verification: *

You are configuring security and you do not want the risks to go through the review and approve process each time they are updated. How will you meet this requirement?

• A.Use only the Risk Approver Composite duty role in the configurations so the risks will not go through the review process.
• B.Ensure that no user has been assigned a job role that includes the Risk Reviewer Composite or Risk Approver Composite Duty Role.
• C.Add the Risk Reviewer Composite duty role to theperson who creates the risks so he or she would be able to review them before saving the record.
• D.Ensure that only the upper management is given the Risk Reviewer Composite duty role so they could review the risks that they want to review.

Comment: *

Name: *

Email: *

Verification: *

Which two should youdetermine to ensure that your client can successfully maintain and administer Perspectives post go-live? (Choose two.)

• A.Identify users who will be responsible for creating and maintaining perspectives, both for security as well as reporting.
• B.Identify if your client wants to review and/or approve new perspectives or changes made to existing perspectives.
• C.Identify users who will be responsible for creating andmaintaining controls and/or risks.
• D.Identify lookupvalues that need to be created for Control, Risk, and Issue Type fields.

Comment: *

Name: *

Email: *

Verification: *

An assessor is trying to complete an operational assessment on a control for manual AP Invoice entry and is reviewing Prior Results.
Which statement is true about viewing Prior Results for this control?

• A.He or she will be able to review results of all prior assessments of all types for this control.
• B.He or she will be able to review results of all prior operational assessments for all controls.
• C.He or she will be able to review results of all prior Audit tests and operational assessments for this control.
• D.He or she will be able to review only results of prior operational assessments for this control.
• E.He or she will be able to review results of all prior assessments of all types for all controls.

Comment: *

Name: *

Email: *

Verification: *

Which three steps can be performed by using the Configure Module Objectspages? (Choose three.)

• A.View assessment response details for all assessment types.
• B.Create object data import templates.
• C.Set "object-perspective" association.
• D.Choose display (or hide) configurable options for: results, events, consequences and treatments.
• E.Edit the assessment activity question and guidance text for all assessment types.

Comment: *

Name: *

Email: *

Verification: *