Which of the following is MOST important when defining controls?

• A.Identifying monitoring mechanisms
• B.Prototyping compensating controls
• C.Including them in the risk register
• D.Aligning them with business objectives

Comment: *

Name: *

Email: *

Verification: *

Which of the following approaches will BEST help to ensure the effectiveness of risk awareness training?

• A.Using reputable third-party training programs
• B.Reviewing content with senior management
• C.Creating modules for targeted audiences
• D.Piloting courses with focus groups

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST useful when measuring the progress of a risk response action plan?

• A.Percentage of mitigated risk scenarios
• B.Annual loss expectancy (ALE) changes
• C.Resource expenditure against budget
• D.An up-to-date risk register

Comment: *

Name: *

Email: *

Verification: *

The MOST essential content to include in an IT risk awareness program is how to:

• A.prioritize IT-related actions by considering risk appetite and risk tolerance.
• B.populate risk register entries and build a risk profile for management reporting.
• C.comply with the organization's IT risk and information security policies.
• D.define the IT risk framework for the organization. .

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the FIRST step when developing a business case to drive the adoption of a risk remediation project by senior management?

• A.Identifying the objectives
• B.Calculating the cost
• C.Analyzing cost-effectiveness
• D.Determining the stakeholders

Comment: *

Name: *

Email: *

Verification: *