A CEO of a large enterprise is concerned that risk events are not regularly addressed at the C-suite level unless related to emergency incidents. Which of the following is the BEST way for the CEO to ensure risk events are given sufficient time and attention?

• A.Include the discussion of key enterprise risk as an agenda item at board meetings.
• B.Issue performance objectives that target the elimination of enterprise risks.
• C.Require the development of a risk procedure on how to capture risks.
• D.Instruct managers to take ownership for their department's identified risks.

Comment: *

Name: *

Email: *

Verification: *

Which of the following risks refers to the risk associated with an event in the absence of specific controls?

• A.Inherent risk
• B.Compliance risk
• C.Financial reporting risk
• D.Operational risk

Comment: *

Name: *

Email: *

Verification: *

Which of the following functions of HR department is liable for attitude surveys, labor relation, employee handbook, and labor law compliance?

• A.Analysis and design for work
• B.Compensation and benefit
• C.Personnel policy
• D.Employee relation

Comment: *

Name: *

Email: *

Verification: *

An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues in application design and configuration. Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior?

• A.Number of IT employees attending security training sessions
• B.Results of application security awareness training quizzes
• C.Number of reported security incidents
• D.Results of application security testing

Comment: *

Name: *

Email: *

Verification: *

An enterprise is planning to outsource data processing for personally identifiable information (Pll). When is the MOST appropriate time to define the requirements for security and privacy of information?

• A.After an assessment of the current information architecture .
• B.During the initial vendor selection process
• C.When developing service level agreements (SLAs)
• D.When issuing requests for proposals (RFPs)

Comment: *

Name: *

Email: *

Verification: *