Which of the following would be an IT business owner's BEST course of action following an unexpected increase in emergency changes?

• A.Conducting a root-cause analysis
• B.Validating the adequacy of current processes
• C.Evaluating the impact to control objectives
• D.Reconfiguring the IT infrastructure

Comment: *

Name: *

Email: *

Verification: *

A web-based service provider with a low risk appetite for system outages is reviewing its current risk profile for online security. Which of the following observations would be MOST relevant to escalate to senior management?

• A.A decrease in achievement of service level agreements (SLAs)
• B.An increase in attempted distributed denial of service (DDoS) attacks
• C.A decrease in remediated web security vulnerabilities
• D.An increase in attempted website phishing attacks

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST influential when management makes risk response decisions?

• A.Audit risk
• B.Detection risk
• C.Risk appetite
• D.Residual risk

Comment: *

Name: *

Email: *

Verification: *

To communicate the risk associated with IT in business terms, which of the following MUST be defined?

• A.Compliance objectives
• B.Risk appetite of the organization
• C.Organizational objectives
• D.Inherent and residual risk

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important for an organization to consider when developing its IT strategy?

• A.Legal and regulatory requirements
• B.IT goals and objectives
• C.Organizational goals and objectives
• D.The organization's risk appetite statement

Comment: *

Name: *

Email: *

Verification: *