A risk practitioner is reporting on an increasing trend of ransomware attacks in the industry. Which of the following information is MOST important to include to enable an informed response decision by key stakeholders?

• A.Most recent antivirus scan reports
• B.Methods of attack progression
• C.Potential impact of events
• D.Losses incurred by industry peers

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of GHT project. A risk event has occurred in your project and you have identified it. Which of the following tasks you would do in reaction to risk event occurrence? Each correct answer represents a part of the solution. Choose three.

• A.Monitor risk
• B.Maintain and initiate incident response plans
• C.Update risk register
• D.Communicate lessons learned from risk events

Comment: *

Name: *

Email: *

Verification: *

Which of the following is BEST described by the definition below?
"They are heavy influencers of the likelihood and impact of risk scenarios and should be taken into account during every risk analysis, when likelihood and impact are assessed."

• A.Obscure risk
• B.Risk factors
• C.Risk analysis
• D.Risk event
• E.Explanation:
  Risk factors are those features that influence the likelihood and/or business impact of risk
  scenarios. They have heavy influences on probability and impact of risk scenarios. They should be
  taken into account during every risk analysis, when likelihood and impact are assessed.
• F.is incorrect. A risk analysis involves identifying the most probable threats to an
  organization and analyzing the related vulnerabilities of the organization to these threats. A risk
  from an organizational perspective consists of:
  Threats to various processes of organization.
  Threats to physical and information assets.
  Likelihood and frequency of occurrence from threat.
  Impact on assets from threat and vulnerability.
  Risk analysis allows the auditor to do the following tasks:
  Identify threats and vulnerabilities to the enterprise and its information system.
  Provide information for evaluation of controls in audit planning.
  Aids in determining audit objectives.
  Supporting decision based on risks.
• G.is incorrect. The enterprise must consider risk that has not yet occurred and should
  develop scenarios around unlikely, obscure or non-historical events.
  Such scenarios can be developed by considering two things:
  Visibility
  Recognition
  For the fulfillment of this task enterprise must:
  Be in a position that it can observe anything going wrong
  Have the capability to recognize an observed event as something wrong

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be a risk practitioner's PRIMARY focus when tasked with ensuring organization records are being retained for a sufficient period of time to meet legal obligations?

• A.Data anonymization processes
• B.Data duplication processes
• C.Data archival processes
• D.Data protection processes

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST illustrates the relationship of actual risk exposure to appetite?

• A.Residual risk that exceeds appetite.
• B.Risk events in the risk profile.
• C.Percentage of high risk scenarios.
• D.Controls that exceed risk appetite.

Comment: *

Name: *

Email: *

Verification: *