Your project has several risks that may cause serious financial impact if they occur. You have studied the risk events and made some potential risk responses for the risk events but management wants you to do more. They'd like you to create some type of a chart that identified the risk probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart?

• A.Risk response plan
• B.Contingency reserve
• C.Risk response
• D.Quantitative analysis

Comment: *

Name: *

Email: *

Verification: *

A contract associated with a cloud service provider MUST include:

• A.provision for source code escrow.
• B.the providers financial statements.
• C.a business recovery plan.
• D.ownership of responsibilities.

Comment: *

Name: *

Email: *

Verification: *

The MOST essential content to include in an IT risk awareness program is how to:

• A.define the IT risk framework for the organization. .
• B.populate risk register entries and build a risk profile for management reporting.
• C.prioritize IT-related actions by considering risk appetite and risk tolerance.
• D.comply with the organization's IT risk and information security policies.

Comment: *

Name: *

Email: *

Verification: *

During a risk assessment, the risk practitioner finds a new risk scenario without controls has been entered into the risk register. Which of the following is the MOST appropriate action?

• A.Request the risk scenario be removed from the register.
• B.Include the new risk scenario in the current risk assessment.
• C.Exclude the new risk scenario from the current risk assessment
• D.Postpone the risk assessment until controls are identified.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would MOST likely cause a risk practitioner to reassess risk scenarios?

• A.An increase in intrusion attempts
• B.A change in the regulatory environment
• C.A change in the risk management policy
• D.A major security incident

Comment: *

Name: *

Email: *

Verification: *