When defining thresholds for control key performance indicators (KPIs), it is MOST helpful to align:

• A.key risk indicators (KRIs) with risk appetite of the business
• B.the control key performance indicators (KPIs) with audit findings
• C.control performance with risk tolerance of business owners
• D.information risk assessments with enterprise risk assessments

Comment: *

Name: *

Email: *

Verification: *

Which of the following are true for threats?
Each correct answer represents a complete solution. Choose three.

• A.They can become more imminent as time goes by, or it can diminish
• B.They can result in risks from external sources
• C.They are possibility
• D.They are real
• E.They will arise and stay in place until they are properly dealt.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST measures the efficiency of an incident response process?

• A.Number of incidents lacking responses
• B.Number of incidents escalated to management
• C.Average time between changes and updating of escalation matrix
• D.Average gap between actual and agreed response times

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST critical element to maximize the potential for a successful security implementation?

• A.Industry-leading security tools
• B.The organization's culture
• C.Ease of implementation
• D.The organization's knowledge

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important when developing key performance indicators (KPIs)?

• A.Alignment to management reports
• B.Alignment to risk responses
• C.Alerts when risk thresholds are reached
• D.Identification of trends

Comment: *

Name: *

Email: *

Verification: *