Which of the following is MOST important when discussing risk within an organization?

• A.Adopting a common risk taxonomy.
• B.Creating a risk communication policy.
• C.Using key performance indicators (KPIs).
• D.Using key risk indicators (KRIs).

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of GHT project. You have planned the risk response process and now you are about to implement various controls. What you should do before relying on any of the controls?

• A.Review performance data
• B.Discover risk exposure
• C.Conduct pilot testing
• D.Articulate risk
• E.Explanation:
  Pilot testing and reviewing of performance data to verify operation against design are done before
  relying on control.
• F.is incorrect. Articulating risk is the first phase in the risk response process to ensure
  that information on the true state of exposures and opportunities are made available in a timely
  manner and to the right people for appropriate response.
  But it does not play any role in identifying whether any specific control is reliable or not.

Comment: *

Name: *

Email: *

Verification: *

A risk practitioner has become aware of production data being used in a test environment. Which of the following should be the practitioner's PRIMARY concern?

• A.Sensitivity of the data
• B.Availability of data to authorized staff
• C.Readability of test data
• D.Security of the test environment

Comment: *

Name: *

Email: *

Verification: *

An organization has procured a managed hosting service and just discovered the location is likely to be flooded every 20 years. Of the following, who should be notified of this new information FIRST.

• A.The data center manager who is also employed under the managed hosting services contract
• B.The chief information officer (CIO) who is responsible for the hosted services
• C.The risk owner who also owns the business service enabled by this infrastructure
• D.The site manager who is required to provide annual risk assessments under the contract

Comment: *

Name: *

Email: *

Verification: *

What is the MOST important consideration when aligning IT risk management with the enterprise risk management (ERM) framework?

• A.Risk and control ownership
• B.Risk nomenclature and taxonomy
• C.Senior management participation
• D.Business unit support

Comment: *

Name: *

Email: *

Verification: *