Which of the following is MOST important to include in regulatory and risk updates when a new legal requirement affects the organization?
#571
Answer: C✅ Correct❌ Incorrect
Who should be accountable for monitoring the control environment to ensure controls are effective?
#572
Answer: A✅ Correct❌ Incorrect
Who is accountable for risk treatment?
#573
Answer: A✅ Correct❌ Incorrect
Which of the following BEST enables the risk profile to serve as an effective resource to support business objectives?
#574
Answer: A✅ Correct❌ Incorrect
The risk associated with a high-risk vulnerability in an application is owned by the:
#575
Answer: C✅ Correct❌ Incorrect
Which of the following IT key risk indicators (KRIs) provides management with the BEST feedback on IT capacity?
#576
Answer: A✅ Correct❌ Incorrect
The PRIMARY goal of a risk management program is to:
#577
Answer: C✅ Correct❌ Incorrect
An organization's chief technology officer (CTO) has decided to accept the risk associated with the potential loss from a denial-of-service (DoS) attack. In this situation, the risk practitioner's BEST course of action is to:
#578
Answer: A✅ Correct❌ Incorrect
The BEST metric to monitor the risk associated with changes deployed to production is the percentage of:
#579
Answer: B✅ Correct❌ Incorrect
A global organization is planning to collect customer behavior data through social media advertising. Which of the following is the MOST important business risk to be considered?
#580
Answer: A✅ Correct❌ Incorrect
Which of the following should be the PRIMARY objective of a risk awareness training program?
#581
Answer: A✅ Correct❌ Incorrect
Which of the following is MOST important for evaluating the operational effectiveness of a newly implemented control?
#582
Answer: C✅ Correct❌ Incorrect
An organization must implement changes as the result of new regulations. Which of the following should the risk practitioner do FIRST to prepare for these changes?
#583
Answer: B✅ Correct❌ Incorrect
What should a risk practitioner do NEXT if an ineffective key control is identified on a critical system?
#584
Answer: B✅ Correct❌ Incorrect
Performing a background check on a new employee candidate before hiring is an example of what type of control?
#585
Answer: B✅ Correct❌ Incorrect
An organization has introduced risk ownership to establish clear accountability for each process. To ensure effective risk ownership, it is MOST important that:
#586
Answer: A✅ Correct❌ Incorrect
Which of the following would MOST likely require a risk practitioner to update the risk register?
#587
Answer: D✅ Correct❌ Incorrect
A peer review of a risk assessment finds that a relevant threat community was not included. Mitigation of the risk will require substantial changes to a software application. Which of the following is the BEST course of action?
#588
Answer: C✅ Correct❌ Incorrect
Which of the following is MOST important when developing key risk indicators (KRIs)?
#589
Answer: C✅ Correct❌ Incorrect
Which of the following provides the MOST up-to-date information about the effectiveness of an organization's overall IT control environment?
#590
Answer: B✅ Correct❌ Incorrect
Which of the following MUST be assessed before considering risk treatment options for a scenario with significant impact?
#591
Answer: B✅ Correct❌ Incorrect
Which of the following would be a risk practitioner's GREATEST concern related to the monitoring of key risk indicators (KRIs)?
#592
Answer: C✅ Correct❌ Incorrect
The BEST key performance indicator (KPI) to measure the effectiveness of a vulnerability remediation program is the number of:
#593
Answer: C✅ Correct❌ Incorrect
Which of the following is the PRIMARY purpose of analyzing log data collected from systems?
#594
Answer: A✅ Correct❌ Incorrect
Which of the following BEST indicates the condition of a risk management program?
#595
Answer: B✅ Correct❌ Incorrect
A risk practitioner has become aware of production data being used in a test environment. Which of the following should be the practitioner's PRIMARY concern?
#596
Answer: C✅ Correct❌ Incorrect
An internal audit report reveals that not all IT application databases have encryption in place. Which of the following information would be MOST important for assessing the risk impact?
#597
Answer: B✅ Correct❌ Incorrect
The PRIMARY purpose of IT control status reporting is to:
#598
Answer: C✅ Correct❌ Incorrect
Which of the following is MOST important to ensure when continuously monitoring the performance of a client-facing application?
#599
Answer: C✅ Correct❌ Incorrect
An organization has four different projects competing for funding to reduce overall IT risk. Which project should management defer?