If one says that the particular control or monitoring tool is sustainable, then it refers to what ability?

• A.The ability to adapt as new elements are added to the environment
• B.The ability to ensure the control remains in place when it fails
• C.The ability to protect itself from exploitation or attack
• D.The ability to be applied in same manner throughout the organization
• E.Explanation:
  Sustainability of the controls or monitoring tools refers to its ability to function as expected over
  time or when changes are made to the environment.
• F.is incorrect. This is not valid definition for defining sustainability of al tool.
• G.is incorrect. Sustainability ensures that controls changes with the conditions, so as not
  to fail in any circumstances. Hence this in not valid answer.

Comment: *

Name: *

Email: *

Verification: *

What activity should be done for effective post-implementation reviews during the project?

• A.Establish the business measurements up front
• B.Allow a sufficient number of business cycles to be executed in the new system
• C.Identify the information collected during each stage of the project
• D.Identify the information to be reviewed
• E.Explanation:
  For effective post-implementation review the business measurements up front is established during the project.

Comment: *

Name: *

Email: *

Verification: *

What are the steps that are involved in articulating risks? Each correct answer represents a complete solution. Choose three.

• A.Identify business opportunities.
• B.Identify the response
• C.Communicate risk analysis results and report risk management activities and the state of compliance.
• D.Interpret independent risk assessment findings.

Correct Answer: A,C,D

Explanation/Reference:
Explanation:
Following are the tasks that are involved in articulating risk:
Communicate risk analysis results.

Report risk management activities and the state of compliance.

Interpret independent risk assessment findings.

Identify business opportunities.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST evidence that risk management is driving business decisions in an organization?

• A.Risk treatment options receive adequate funding.
• B.Risk ownership is identified and assigned.
• C.Compliance breaches are addressed in a timely manner.
• D.Residual risk is within risk tolerance.

Comment: *

Name: *

Email: *

Verification: *

Winch of the following key control indicators (KCIs) BEST indicates whether security requirements are identified and managed throughout a project He cycle?

• A.Number of projects going live without a security review
• B.Number of security projects started in core departments
• C.Number of security-related status reports submitted by project managers
• D.Number of employees completing project-specific security training

Comment: *

Name: *

Email: *

Verification: *