Which of the following facilitates a completely independent review of test results for evaluating control effectiveness?

• A.Compliance review
• B.Segregation of duties
• C.Three lines of defense
• D.Quality assurance review

Comment: *

Name: *

Email: *

Verification: *

A maturity model will BEST indicate:

• A.certification and accreditation.
• B.availability and reliability.
• C.confidentiality and integrity.
• D.effectiveness and efficiency.

Comment: *

Name: *

Email: *

Verification: *

Business areas within an organization have engaged various cloud service providers directly without assistance from the IT department. What should the risk practitioner do?

• A.Escalate to the risk committee.
• B.Recommend the IT department remove access to the cloud services.
• C.Recommend a risk assessment be conducted.
• D.Engage with the business area managers to review controls applied.

Comment: *

Name: *

Email: *

Verification: *

When developing IT risk scenarios, it is CRITICAL to involve:

• A.process owners
• B.IT managers
• C.internal auditors
• D.senior management

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important data source for monitoring key risk indicators (KRIs)?

• A.Audit reports from internal information systems audits
• B.Directives from legal and regulatory authorities
• C.Trend analysis of external risk factors
• D.Automated logs collected from different systems

Comment: *

Name: *

Email: *

Verification: *