A risk practitioner has observed that there is an increasing trend of users sending sensitive information by email without using encryption. Which of the following would be the MOST effective approach to mitigate the risk associated with data loss?

• A.Implement a tool to create and distribute violation reports
• B.Implement a progressive disciplinary process for email violations.
• C.Raise awareness of encryption requirements for sensitive data.
• D.Block unencrypted outgoing emails which contain sensitive data.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would present the GREATEST challenge when assigning accountability for control ownership?

• A.Unclear reporting relationships
• B.Weak governance structures
• C.Senior management scrutiny
• D.Complex regulatory environment

Comment: *

Name: *

Email: *

Verification: *

From a risk management perspective, which of the following is the PRIMARY benefit of using automated system configuration validation tools?

• A.Inherent risk is reduced.
• B.Residual risk is reduced.
• C.Staff costs are reduced.
• D.Operational costs are reduced.

Comment: *

Name: *

Email: *

Verification: *

What are the PRIMARY objectives of a control?

• A.Detect, recover, and attack
• B.Prevent, respond, and log
• C.Prevent, control, and attack
• D.Prevent, recover, and detect
• E.Explanation:
  Controls are the policies, procedures, practices and guidelines designed to provide appropriate assurance that business objectives are achieved and undesired events are detected, prevented, and corrected. Controls, or countermeasures, will reduce or neutralize threats or vulnerabilities. Controls have three primary objectives: Prevent Recover Detect

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to understand when developing key risk indicators (KRIs)?

• A.Stakeholder requirements
• B.Control environment
• C.Integrity of the source data
• D.KRI thresholds

Comment: *

Name: *

Email: *

Verification: *