An enterprise has lost an unencrypted backup tape of archived customer dat a. A data breach report is not mandatory in the relevant jurisdiction. From an ethical standpoint, what should the enterprise do NEXT?

• A.Communicate the breach to customers.
• B.Mandate a review of backup tape inventory procedures.
• C.Initiate disciplinary proceedings against relevant employees.
• D.Require an evaluation of storage facility vendors.

Comment: *

Name: *

Email: *

Verification: *

Which of the following best describes the identification, analysis, and ranking of risks?

• A.Plan Risk management
• B.Fast tracking
• C.Design of experiments
• D.Fixed-price contracts

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of the CUL project in your organization. You and the project team are assessing the risk events and creating a probability and impact matrix for the identified risks. Which one of the following statements best describes the requirements for the data type used in qualitative risk analysis?

• A.A qualitative risk analysis requires fast and simple data to complete the analysis.
• B.A qualitative risk analysis encourages biased data to reveal risk tolerances.
• C.A qualitative risk analysis required unbiased stakeholders with biased risk tolerances.
• D.A qualitative risk analysis requires accurate and unbiased data if it is to be credible.

Comment: *

Name: *

Email: *

Verification: *

Which of the following sub-processes of Capacity Management is concerned with the management of the individual components of the IT Infrastructure?

• A.Capacity Management Reporting
• B.Resource Capacity Management
• C.Business Capacity Management
• D.Service Capacity Management

Comment: *

Name: *

Email: *

Verification: *

How does an enterprise benefit from implementing a set of key risk indicators (KRIs)?

• A.The set of KRIs remains relevant over time.
• B.Risk exposures are monitored to ensure they remain within risk appetite.
• C.The need for a formal risk and control assessment program is eliminated.
• D.The frequency of risk data gathering and reporting is minimized.

Comment: *

Name: *

Email: *

Verification: *