An IT risk practitioner has been asked to regularly report on the overall status and effectiveness of the IT risk management program. Which of the following is MOST useful for this purpose?

• A.Balanced scorecard
• B.Control self-assessment (CSA)
• C.Capability maturity level
• D.Internal audit plan

Comment: *

Name: *

Email: *

Verification: *

The BEST key performance indicator (KPI) for monitoring adherence to an organization's user accounts provisioning practices is the percentage of:

• A.active accounts belonging to former personnel.
• B.accounts with dormant activity.
• C.accounts without documented approval.
• D.user accounts with default passwords.

Comment: *

Name: *

Email: *

Verification: *

What can be determined from the risk scenario chart?

• A.Risk treatment options
• B.The multiple risk factors addressed by a chosen response
• C.Relative positions on the risk map
• D.Capability of enterprise to implement

Comment: *

Name: *

Email: *

Verification: *

An organization is planning to acquire a new financial system. Which of the following stakeholders would provide the MOST relevant information for analyzing the risk associated with the new IT solution?

• A.Process owner
• B.Internal auditor
• C.Risk manager
• D.Project sponsor

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of GHT project. A risk event has occurred in your project and you have identified it. Which of the following tasks you would do in reaction to risk event occurrence? Each correct answer represents a part of the solution. Choose three.

• A.Monitor risk
• B.Maintain and initiate incident response plans
• C.Update risk register
• D.Communicate lessons learned from risk events

Comment: *

Name: *

Email: *

Verification: *