Which of the following activities is PRIMARILY the responsibility of senior management?

• A.Review of external loss data
• B.Bottom-up identification of emerging risks
• C.Categorization of risk scenarios against a standard taxonomy
• D.Prioritization of risk scenarios based on severity

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST helpful in developing key risk indicator thresholds?

• A.Loss expectancy information
• B.IT service level agreements
• C.Control performance results
• D.Remediation activity progress

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of an anti- virus program?

• A.Frequency of anti-virus software updates
• B.Number of alerts generated by the anti-virus software
• C.Percentage of IT assets with current malware definitions
• D.Number of false positives detected over a period of time

Comment: *

Name: *

Email: *

Verification: *

When establishing an enterprise IT risk management program, it is MOST important to:

• A.review alignment with the organization's strategy.
• B.understand the organization's information security policy.
• C.validate the organization's data classification scheme.
• D.report identified IT risk scenarios to senior management.

Comment: *

Name: *

Email: *

Verification: *

What can be determined from the risk scenario chart?

• A.Relative positions on the risk map
• B.The multiple risk factors addressed by a chosen response
• C.Capability of enterprise to implement
• D.Risk treatment options

Comment: *

Name: *

Email: *

Verification: *