You are the project manager of GHT project. Your hardware vendor left you a voicemail saying that the delivery of the equipment you have ordered would not arrive on time. You identified a risk response strategy for this risk and have arranged for a local company to lease you the needed equipment until yours arrives. This is an example of which risk response strategy?

• A.Avoid
• B.Transfer
• C.Acceptance
• D.Mitigate
• E.Explanation:
  Mitigation attempts to reduce the impact of a risk event in case it occurs. Making plans to arrange
  for the leased equipment reduces the consequences of the risk and hence this response in
  mitigation.
• F.is incorrect. Risk transfer means that impact of risk is reduced by transferring or
  otherwise sharing a portion of the risk with an external organization or another internal entity.
  Transfer of risk can occur in many forms but is most effective when dealing with financial risks.
  Insurance is one form of risk transfer.
  Here there no such action is taken, hence it is not a risk transfer.
• G.is incorrect. Risk acceptance means that no action is taken relative to a particular risk;
  loss is accepted if it occurs. If an enterprise adopts a risk acceptance, it should carefully consider
  who can accept the risk. Risk should be accepted only by senior management in relationship with
  senior management and the board. There are two alternatives to the acceptance strategy, passive
  and active.
  Passive acceptance means that enterprise has made no plan to avoid or mitigate the risk but
  willing to accept the consequences of the risk.
  Active acceptance is the second strategy and might include developing contingency plans and
  reserves to deal with risks.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST approach to use when creating a comprehensive set of IT risk scenarios?

• A.Gather scenarios from senior management
• B.Derive scenarios from IT risk policies and standards
• C.Benchmark scenarios against industry peers
• D.Map scenarios to a recognized risk management framework

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the HIGHEST priority when developing a risk response?

• A.The risk response is accounted for in the budget.
• B.The risk response aligns with the organization's risk appetite.
• C.The risk response is based on a cost-benefit analysis.
• D.The risk response addresses the risk with a holistic view.

Comment: *

Name: *

Email: *

Verification: *

A cote data center went offline abruptly for several hours affecting many transactions across multiple locations. Which of the to" owing would provide the MOST useful information to determine mitigating controls?

• A.Risk assessment
• B.Forensic analysis
• C.Root cause analysis
• D.Business impact analysis (BlA)

Comment: *

Name: *

Email: *

Verification: *

An organization's IT infrastructure is running end-of-life software that is not allowed without exception approval. Which of the following would provide the MOST helpful information to justify investing in updated software?

• A.The balanced scorecard
• B.A cost-benefit analysis
• C.The risk management framework

Comment: *

Name: *

Email: *

Verification: *