NEW QUESTION 475
Which of the following BEST enables the identification of trends in risk levels?

NEW QUESTION 476
Which of the following is MOST important to consider before determining a response to a vulnerability?

NEW QUESTION 477
What are the functions of audit and accountability control?
Each correct answer represents a complete solution. (Choose three.)

NEW QUESTION 478
Which of the following would BEST facilitate the implementation of data classification requirements?

NEW QUESTION 479
Which of the following is the MAIN benefit of involving stakeholders in the selection of key risk indicators (KRIs)?

NEW QUESTION 480
A risk practitioner has received an updated enterprise risk management (ERM) report showing that residual risk is now within the organization’s defined appetite and tolerance levels. Which of the following is the risk practitioner’s BEST course of action?

NEW QUESTION 481
Which of the following techniques examines the degree to which organizational strengths offset
threats and opportunities that may serve to overcome weaknesses?

NEW QUESTION 482
A control for mitigating risk in a key business area cannot be implemented immediately. Which of the following is the risk practitioner’s BEST course of action when a compensating control needs to be applied?

NEW QUESTION 483
An organization is considering outsourcing user administration controls for a critical system. The potential vendor has offered to perform quarterly self-audits of its controls instead of having annual independent audits. Which of the following should be of GREATEST concern to the risk practitioner?

NEW QUESTION 484
An organization has been experiencing an increasing number of spear phishing attacks Which of the following would be the MOST effective way to mitigate the risk associated with these attacks?

NEW QUESTION 485
Management has noticed storage costs have increased exponentially over the last 10 years because most users do not delete their emails. Which of the following can BEST alleviate this issue while not sacrificing security?

NEW QUESTION 486
When performing a risk assessment of a new service to support a ewe Business process. which of the following should be done FRST10 ensure continuity of operations?

NEW QUESTION 487
Which of the following risks is associated with not receiving the right information to the right people at the right time to allow the right action to be taken?

NEW QUESTION 488
During an IT risk scenario review session, business executives question why they have been assigned ownership of IT-related risk scenarios. They feel IT risk is technical in nature and therefore should be owned by IT. Which of the following is the BEST way for the risk practitioner to address these concerns?

NEW QUESTION 489
A large organization needs to report risk at all levels for a new centralized virtualization project to reduce cost and improve performance. Which of the following would MOST effectively represent the overall risk of the project to senior management?

NEW QUESTION 490
Which of the following will BEST help in communicating strategic risk priorities?

NEW QUESTION 491
Which of the following is the MOST effective way to incorporate stakeholder concerns when developing risk scenarios?

NEW QUESTION 492
A risk practitioner observes that hardware failure incidents have been increasing over the last few months.
However, due to built-in redundancy and fault-tolerant architecture, there have been no interruptions to business operations. The risk practitioner should conclude that:

NEW QUESTION 493
Which of the following operational risks ensures that the provision of a quality product is not overshadowed by the production costs of that product?

NEW QUESTION 494
Which of the following controls is an example of non-technical controls?

NEW QUESTION 495
When preparing a risk status report for periodic review by senior management, it is MOST important to ensure the report includes:

NEW QUESTION 496
Which of the following BEST measures the efficiency of an incident response process?

NEW QUESTION 497
WhichT5f the following is the MOST effective way to promote organization-wide awareness of data security in response to an increase in regulatory penalties for data leakage?

NEW QUESTION 498
The MAIN purpose of reviewing a control after implementation is to validate that the control:

NEW QUESTION 499
You are the project manager of your enterprise. While performing risk management, you are given a task to identify where your enterprise stand in certain practice and also to suggest the priorities for improvements. Which of the following models would you use to accomplish this task?