You are the risk official of your enterprise. Your enterprise takes important decisions without considering risk credential information and is also unaware of external requirements for risk management and integration with enterprise risk management. In which of the following risk management capability maturity levels does your enterprise exists?

• A.Level 1
• B.Level 0
• C.Level 5
• D.Level 4

Correct Answer: B

Explanation/Reference:
Explanation:
0 nonexistent: An enterprise's risk management capability maturity level is 0 when:
The enterprise does not recognize the need to consider the risk management or the business impact

from IT risk.
Decisions involving risk lack credible information.

Awareness of external requirements for risk management and integration with enterprise risk

management (ERM) do not exists.
Incorrect Answers:
A, C, D: These all are much higher levels of the risk management capability maturity model and in all these enterprises do take decisions considering the risk credential information. Moreover, in these levels enterprise is aware of external requirements for risk management and integrate with ERM.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of a disaster recovery plan (DRP)?

• A.Percentage of issues resolved as a result of DRP testing
• B.Percentage of applications that met the RTO during DRP testing
• C.Number of issues identified during DRP testing
• D.Number of users that participated in the DRP testing

Comment: *

Name: *

Email: *

Verification: *

Which of the following nodes of the decision tree analysis represents the start point of decision tree?

• A.Decision node
• B.End node
• C.Event node
• D.Root node

Comment: *

Name: *

Email: *

Verification: *

Which of the following stakeholders are typically included as part of a line of defense within the three lines of defense model?

• A.Vendors
• B.Legal team
• C.Regulators
• D.Board of directors

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST key performance indicator (KPI) for determining how well an IT policy is aligned to business requirements?

• A.Total cost of policy breaches.
• B.Total cost to support the policy.
• C.Number of exceptions to the policy.
• D.Number of inquiries regarding the policy.

Comment: *

Name: *

Email: *

Verification: *