Which of the following is a PRIMARY benefit of engaging the risk owner during the risk assessment process?

• A.Identification of controls gaps that may lead to noncompliance
• B.Accurate measurement of loss impact
• C.Early detection of emerging threats
• D.Prioritization of risk action plans across departments

Comment: *

Name: *

Email: *

Verification: *

A risk owner has identified a risk with high impact and very low likelihood. The potential loss is covered by insurance. Which of the following should the risk practitioner do NEXT?

• A.Evaluate outsourcing the process.
• B.Recommend avoiding the risk.
• C.Validate the risk response with internal audit.
• D.Update the risk register.

Comment: *

Name: *

Email: *

Verification: *

IT risk assessments can BEST be used by management:

• A.to measure organizational success.
• B.as input for decision-making.
• C.as a basis for cost-benefit analysis.
• D.for compliance with laws and regulations.

Comment: *

Name: *

Email: *

Verification: *

An organization is considering modifying its system to enable acceptance of credit card payments. To reduce the risk of data exposure, which of the following should the organization do FIRST?

• A.Implement additional controls
• B.Conduct a risk assessment
• C.Update the risk register
• D.Update the security strategy

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST indicates that an organizations risk management program is effective?

• A.The number of audit findings has decreased.
• B.Fewer security incidents have been reported.
• C.Residual risk is reduced.
• D.inherent risk Is unchanged.

Comment: *

Name: *

Email: *

Verification: *