Who can move a Policy into Review? (Choose two.)

• A.sys admin
• B.policy approver
• C.policy reviewer
• D.policy owner

Comment: *

Name: *

Email: *

Verification: *

The Calculated Risk Score utilizes data from the Inherent and Residual Risk scores to determine an adjusted ALE and Score. What other data drives the adjustments?

• A.Control and Indicator Failure Factors
• B.Audit Scores
• C.Configuration Test Score
• D.Attestation Score

Comment: *

Name: *

Email: *

Verification: *

For classic risk assessment, while a Risk is in the Assess state, reviewers can do which of the following?
(Choose two.)

• A.Delete the Risk
• B.Set the Risk back to Draft
• C.Answer the assessment, moving the Risk to Respond
• D.Set the Risk to Monitor

Comment: *

Name: *

Email: *

Verification: *

What table is an implementer's starting point to meet a customer requirement to generate a report related to a specific policy acknowledgement campaign?

• A.sn_compliance_policy
• B.sn_grc_audience
• C.sn_compllance_policy_acknowledgement
• D.sn_compliance_pollcy_acknowledgementjnstance

Comment: *

Name: *

Email: *

Verification: *

Jim is an Audit Manager. In addition to Audit Manager, which roles should be assigned to ensure he can manage the audit process as well as other GRC functions related to audit? (Choose two.)

• A.sn_grc.developer
• B.sn_grc.user
• C.sn_grc.reader
• D.sn_audit.user
• E.sn_grc.manager

Comment: *

Name: *

Email: *

Verification: *