Which of the following is the MOST important data source for monitoring key risk indicators (KRIs)?

• A.Audit reports from internal information systems audits
• B.Directives from legal and regulatory authorities
• C.Trend analysis of external risk factors
• D.Automated logs collected from different systems

Comment: *

Name: *

Email: *

Verification: *

While reviewing the risk register, a risk practitioner notices that different business units have significant variances in inherent risk for the same risk scenario. Which of the following is the BEST course of action?

• A.Request that both business units conduct another review of the risk.
• B.Update the risk register with the average of residual risk for both business units.
• C.Review the assumptions of both risk scenarios to determine whether the variance is reasonable.
• D.Update the risk register to ensure both risk scenarios have the highest residual risk.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST key performance indicator (KPI) to measure the maturity of an organization's security incident handling process?

• A.The number of resolved security incidents
• B.The number of security incidents escalated to senior management
• C.The number of newly identified security incidents
• D.The number of recurring security incidents

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST comprehensive resource for prioritizing the implementation of information systems controls?

• A.The IT strategic plan
• B.Data classification policy
• C.Emerging technology trends
• D.The risk register

Comment: *

Name: *

Email: *

Verification: *

Which of The following is the MOST comprehensive input to the risk assessment process specific to the effects of system downtime?

• A.results Recovery point objective (RPO)
• B.Business impact analysis (BIA)
• C.Business continuity plan (BCP) testing results
• D.Recovery lime objective (RTO)

Comment: *

Name: *

Email: *

Verification: *