To help ensure the success of a major IT project, it is MOST important to:

• A.obtain approval from business process owners
• B.align it with the organization's strategic plan
• C.obtain the appropriate stakeholders' commitment
• D.update the risk register on a regular basis

Comment: *

Name: *

Email: *

Verification: *

Which of the following risk register updates is MOST important for senior management to review?

• A.Avoiding a risk that was previously accepted
• B.Extending the date of a future action plan by two months
• C.Retiring a risk scenario no longer used
• D.Changing a risk owner

Comment: *

Name: *

Email: *

Verification: *

Analyzing trends in key control indicators (KCIs) BEST enables a risk practitioner to proactively identify impacts on an organization's:

• A.risk classification methods
• B.risk portfolio
• C.risk culture
• D.risk-based capital allocation

Comment: *

Name: *

Email: *

Verification: *

Which of the following will BEST help to ensure the continued effectiveness of the IT risk management function within an organization experiencing high employee turnover?

• A.An IT strategy committee
• B.Change and release management
• C.Risk and issue tracking
• D.Well documented policies and procedures

Comment: *

Name: *

Email: *

Verification: *

You are the Risk Official in Bluewell Inc. You have detected much vulnerability during risk assessment process. What you should do next?

• A.Prioritize vulnerabilities for remediation solely based on impact.
• B.Handle vulnerabilities as a risk, even though there is no threat.
• C.Analyze the effectiveness of control on the vulnerabilities' basis.
• D.Evaluate vulnerabilities for threat, impact, and cost of mitigation.
• E.Explanation:
  Vulnerabilities detected during assessment should be first evaluated for threat, impact and cost of mitigation. It should be evaluated and prioritized on the basis whether they impose credible threat or not.

Comment: *

Name: *

Email: *

Verification: *