Which of the following should be the PRIMARY focus of an IT risk awareness program?

• A.Cultivate long-term behavioral change.
• B.Communicate IT risk policy to the participants.
• C.Demonstrate regulatory compliance.
• D.Ensure compliance with the organization's internal policies

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST useful when measuring the progress of a risk response action plan?

• A.Resource expenditure against budget
• B.An up-to-date risk register
• C.Percentage of mitigated risk scenarios
• D.Annual loss expectancy (ALE) changes

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of GHT project. You and your team have developed risk responses for those risks with the highest threat to or best opportunity for the project objectives. What are the immediate steps you should follow, after planning for risk response process? Each correct answer represents a complete solution. Choose three.

• A.Updating Project management plan and Project document
• B.Applying controls
• C.Updating Risk register
• D.Prepare Risk-related contracts
• E.Explanation:
  The risk register is updated at the end of the plan risk response process with the information that was discovered during the process. The response plans are recorded in the risk register. Project management plan consisting of WBS, schedule baseline and cost performance baseline should be updated. After planning risk response process, there may be requirementof updating project documents like technical documentation and assumptions, documented in the project scope statement. If risk response strategies include responses such as transference or sharing, it may be necessary to purchase services or items from third parties. Contracts for those services can be prepared and discussed with the appropriate parties.

Comment: *

Name: *

Email: *

Verification: *

An organization is measuring the effectiveness of its change management program to reduce the number of unplanned production changes. Which of the following would be the BEST metric to determine if the program is performing as expected?

• A.Decrease in the time to move changes to production
• B.Ratio of system changes to total changes
• C.Ratio of emergency fixes to total changes
• D.Decrease in number of changes without a fallback plan

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST comprehensive resource for prioritizing the implementation of information systems controls?

• A.The IT strategic plan
• B.Emerging technology trends
• C.Data classification policy
• D.The risk register

Comment: *

Name: *

Email: *

Verification: *