Which of the following is MOST influential when management makes risk response decisions?

• A.Detection risk
• B.Residual risk
• C.Audit risk
• D.Risk appetite

Comment: *

Name: *

Email: *

Verification: *

Who should have the authority to approve an exception to a control?

• A.information security manager
• B.Control owner
• C.Risk owner
• D.Risk manager

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the way to verify control effectiveness?

• A.The capability of providing notification of failure.
• B.Whether it is preventive or detective.
• C.Its reliability.
• D.The test results of intended objectives.
• E.Explanation:
  Control effectiveness requires a process to verify that the control process worked as intended and
  meets the intended control objectives.
  Hence the test result of intended objective helps in verifying effectiveness of control.
• F.is incorrect. Reliability is not an indication of control strength; weak controls can be
  highly reliable, even if they do not meet the control objective.
• G.is incorrect. The type of control, like preventive or detective, does not help determine
  control effectiveness.

Comment: *

Name: *

Email: *

Verification: *

Natural disaster is BEST associated to which of the following types of risk?

• A.Short-term
• B.Long-term
• C.Discontinuous
• D.Large impact

Comment: *

Name: *

Email: *

Verification: *

The BEST key performance indicator (KPI) to measure the effectiveness of a vendor risk management program is the percentage of:

• A.vendors providing risk assessments on time.
• B.vendors that have reported control-related incidents.
• C.vendor risk mitigation action items completed on time.
• D.vendor contracts reviewed in the past year.

Comment: *

Name: *

Email: *

Verification: *