Which of the following is MOST important to have in place to ensure the effectiveness of risk and security metrics reporting?

• A.Incident management policy
• B.Regularly scheduled audits
• C.Organizational reporting process
• D.Incident reporting procedures

Comment: *

Name: *

Email: *

Verification: *

A key risk indicator (KRI) indicates a reduction in the percentage of appropriately patched servers. Which of the following is the risk practitioner's BEST course of action?

• A.Determine changes in the risk level.
• B.Add agenda item to the next risk committee meeting.
• C.Outsource the vulnerability management process.
• D.Review the patch management process.

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides The BEST information when determining whether to accept residual risk of a critical system to be implemented?

• A.Single loss expectancy (SLE)
• B.Potential business impacts are within acceptable levels
• C.Availability of additional compensating controls
• D.Cost of the information system

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the principles of risk management?
Each correct answer represents a complete solution. Choose three.

• A.Risk management should be an integral part of the organization
• B.Risk management should be a part of decision-making
• C.Risk management is the responsibility of executive management
• D.Risk management should be transparent and inclusive

Correct Answer: A,B,D

Explanation/Reference:
Explanation:
The International Organization for Standardization (ISO) identifies the following principles of risk management. Risk management should:
create value

be an integral part of organizational processes

be part of decision making

explicitly address uncertainty

be systematic and structured

be based on the best available information

be tailored

take into account human factors

be transparent and inclusive

be dynamic, iterative, and responsive to change

be capable of continual improvement and enhancement

Comment: *

Name: *

Email: *

Verification: *