Which of the following is MOST useful for measuring the existing risk management process against a desired date?
#1171
Answer: A✅ Correct❌ Incorrect
Which of the following BEST enables senior management to compare the ratings of risk scenarios?
#1172
Answer: C✅ Correct❌ Incorrect
Which of the following BEST reduces the probability of laptop theft?
#1173
Answer: C✅ Correct❌ Incorrect
Which of the following is the GREATEST benefit of having a mature enterprise architecture (EA) in place?
#1174
Answer: B✅ Correct❌ Incorrect
What is the MAIN benefit of using a top-down approach to develop risk scenarios?
#1175
Answer: B✅ Correct❌ Incorrect
Management has determined that it will take significant time to remediate exposures in the current IT control environment. Which of the following is the BEST course of action?
#1176
Answer: D✅ Correct❌ Incorrect
Which of the following is the BEST risk management approach for the strategic IT planning process?
#1177
Answer: B✅ Correct❌ Incorrect
Which of the following will BEST help to ensure new IT policies address the enterprise’s requirements?
#1178
Answer: A✅ Correct❌ Incorrect
The PRIMARY objective of collecting information and reviewing documentation when performing periodic risk analyses should be to:
#1179
Answer: B✅ Correct❌ Incorrect
An organization is developing a risk universe to create a holistic view of its overall risk profile. Which of the following is the GREATEST barrier to achieving the initiative's objectives?
#1180
Answer: A✅ Correct❌ Incorrect
Which of the following is MOST important for managing ethical risk?
#1181
Answer: C✅ Correct❌ Incorrect
Which of the following is PRIMARILY a risk management responsibility of the first line of defense?
#1182
Answer: A✅ Correct❌ Incorrect
Which of the following is the MOST important metric to monitor the performance of the change management process?
#1183
Answer: D✅ Correct❌ Incorrect
Which of the following should be the PRIMARY basis for deciding whether to disclose information related to risk events that impact external stakeholders?
#1184
Answer: C✅ Correct❌ Incorrect
Which of the following is a risk practitioner’s BEST course of action upon learning that regulatory authorities have concerns with an emerging technology the organization is considering?
#1185
Answer: B✅ Correct❌ Incorrect
Which of the following provides the BEST assurance of control effectiveness for security risk scenarios in a service provider’s environment?
#1186
Answer: A✅ Correct❌ Incorrect
Which of the following BEST enables risk mitigation associated with software licensing noncompliance?
#1187
Answer: C✅ Correct❌ Incorrect
As part of software development projects, risk assessments are MOST effective when performed:
#1188
Answer: A✅ Correct❌ Incorrect
Which of the following MOST effectively ensures controls are built into applications during development?
#1189
Answer: D✅ Correct❌ Incorrect
Which of the following analyses is MOST useful for prioritizing risk scenarios associated with loss of IT assets?
#1190
Answer: B✅ Correct❌ Incorrect
The PRIMARY reason to implement a formalized risk taxonomy is to:
#1191
Answer: A✅ Correct❌ Incorrect
Which of the following is the FIRST consideration to reduce risk associated with the storage of personal data?
#1192
Answer: C✅ Correct❌ Incorrect
After the announcement of a new IT regulatory requirement, it is MOST important for a risk practitioner to:
#1193
Answer: B✅ Correct❌ Incorrect
Which of the following has the GREATEST impact on ensuring the alignment of the risk profile with business objectives?
#1194
Answer: C✅ Correct❌ Incorrect
Which of the following is MOST helpful to review when assessing the risk exposure associated with ransomware?
#1195
Answer: A✅ Correct❌ Incorrect
Which of the following should be the PRIMARY area of focus when reporting changes to an organization’s risk profile to executive management?
#1196
Answer: C✅ Correct❌ Incorrect
When assembling IT risk scenarios, it is MOST important that the scenarios:
#1197
Answer: B✅ Correct❌ Incorrect
Optimized risk management is achieved when risk is reduced:
#1198
Answer: D✅ Correct❌ Incorrect
Which of the following should be done FIRST to enable consistent understanding of risk across the organization?
#1199
Answer: C✅ Correct❌ Incorrect
Which of the following is the BEST way to reduce the likelihood of an individual performing a potentially harmful action as the result of unnecessary entitlement?