Which of the following tools is MOST effective in identifying trends in the IT risk profile?

• A.Risk self-assessment
• B.Risk map
• C.Risk dashboard
• D.Risk register

Comment: *

Name: *

Email: *

Verification: *

A data processing center operates in a jurisdiction where new regulations have significantly increased penalties for data breaches. Which of the following elements of the risk register is MOST important to update to reflect this change?

• A.Risk appetite
• B.Risk likelihood
• C.Risk impact
• D.Risk trend

Comment: *

Name: *

Email: *

Verification: *

An organization has four different projects competing for funding to reduce overall IT risk. Which project should management defer?

• A.Project Bravo
• B.Project Charlie
• C.Project Alpha
• D.Project Delta

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST assists in justifying an investment in automated controls?

• A.Alignment of investment with risk appetite
• B.Elimination of compensating controls
• C.Cost-benefit analysis
• D.Reduction in personnel costs

Comment: *

Name: *

Email: *

Verification: *

An IT control gap has been identified in a key process. Who would be the MOST appropriate owner of the risk associated with this gap?

• A.Business process owner
• B.Chief information security officer
• C.Operational risk manager
• D.Key control owner

Comment: *

Name: *

Email: *

Verification: *