Which of the following methods is an example of risk mitigation?

• A.Outsourcing the IT activities and infrastructure
• B.Taking out insurance coverage for IT-related incidents
• C.Enforcing change and configuration management processes
• D.Not providing capability for employees to work remotely

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST indication of an effective risk management program?

• A.Risk action plans are approved by senior management
• B.Mitigating controls are designed and implemented
• C.Residual risk is within the organizational risk appetite
• D.Risk is recorded and tracked in the risk register

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST useful when communicating risk to management?

• A.Risk policy
• B.Risk map
• C.Maturity model
• D.Audit report

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST advantage of implementing a risk management program?

• A.Promoting a risk-aware culture
• B.Improving security governance
• C.Enabling risk-aware decisions
• D.Reducing residual risk

Comment: *

Name: *

Email: *

Verification: *

UESTION NO:
The PRIMARY benefit associated with key risk indicators (KRls) is that they

• A.help an organization identify emerging threats.
• B.benchmark the organization's risk profile.
• C.identify trends in the organization's vulnerabilities.
• D.enable ongoing monitoring of emerging risk.

Comment: *

Name: *

Email: *

Verification: *