Winch of the following key control indicators (KCIs) BEST indicates whether security requirements are identified and managed throughout a project He cycle?

• A.Number of projects going live without a security review
• B.Number of security-related status reports submitted by project managers
• C.Number of security projects started in core departments
• D.Number of employees completing project-specific security training

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to compare against the corporate risk profile?

• A.Risk appetite
• B.Industry benchmarks
• C.Regulatory compliance
• D.Risk tolerance

Comment: *

Name: *

Email: *

Verification: *

When of the following is the BEST key control indicator (KCI) to determine the effectiveness of en intrusion prevention system (IPS)?

• A.Percentage of system uptime
• B.Percentage of relevant threats mitigated
• C.Reaction time of the system to threats
• D.Total number of threats identified

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be a risk practitioner's BEST recommendation to help ensure cyber risk is assessed and reflected in the enterprise-level risk profile?

• A.Conduct cyber risk awareness training tailored specifically for senior management
• B.Implement a cyber risk program based on industry best practices
• C.Manage cyber risk according to the organization's risk management framework
• D.Define cyber roles and responsibilities across the organization

Comment: *

Name: *

Email: *

Verification: *

When reporting on the performance of an organization's control environment including which of the following would BEST inform stakeholders risk decision-making?

• A.The audit plan for the upcoming period
• B.A status report of control deployment
• C.Spend to date on mitigating control implementation
• D.A report of deficiencies noted during controls testing

Comment: *

Name: *

Email: *

Verification: *