Which of the following should be included in a risk scenario to be used for risk analysis?

• A.Residual risk
• B.Risk tolerance
• C.Risk appetite
• D.Threat type

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the first MOST step in the risk assessment process?

• A.Identification of assets
• B.Identification of threats
• C.Identification of threat sources
• D.Identification of vulnerabilities

Comment: *

Name: *

Email: *

Verification: *

Out of several risk responses, which of the following risk responses is used for negative risk events?

• A.Share
• B.Enhance
• C.Exploit
• D.Accept

Comment: *

Name: *

Email: *

Verification: *

Within the three lines of defense model, the accountability for the system of internal control resides with:

• A.the risk practitioner.
• B.the chief information officer (CIO).
• C.enterprise risk management.
• D.the board of directors

Comment: *

Name: *

Email: *

Verification: *

What can be determined from the risk scenario chart?

• A.Capability of enterprise to implement
• B.Risk treatment options
• C.The multiple risk factors addressed by a chosen response
• D.Relative positions on the risk map

Comment: *

Name: *

Email: *

Verification: *