IT Risk FundamentalsPreview

Which of the following provides the MOST important input for analyzing I&T-related risk?

A risk practitioner has been tasked with analyzing new risk events added to the risk register. Which of the following analysis methods would BEST enable the risk practitioner to minimize ambiguity and subjectivity?

Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?

Which of the following is a KEY contributing component for determining risk rankings to direct risk response?

Which of the following is the MAIN reason to include previously overlooked risk in a risk report?

What is the PRIMARY benefit of using generic technology terms in IT risk assessment reports to management?

Risk monitoring is MOST effective when it is conducted:

Key risk indicators (KRIs) are used for which of the following purposes when developing a project plan?

In the context of enterprise risk management (ERM), what is the overall role of I&T risk management stakeholders?

Which of the following is considered an exploit event?

How does an enterprise decide how much risk it is willing to take to meet its business objectives?

Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?

Of the following, which stakeholder group is MOST often responsible for risk governance?

Which of the following presents the GREATEST risk for the continued existence of an enterprise?

Which of the following would have the MOST impact on the accuracy and appropriateness of plans associated with business continuity and disaster recovery?

Which of the following MUST be established in order to manage I&T-related risk throughout the enterprise?

Which risk response option has been adopted when an enterprise outsources disaster recovery activities to leverage the skills and expertise of a third-party provider?

As part of an I&T related risk assessment, which of the following should be reviewed to obtain an initial view of overall I&T related risk for the enterprise?

Risk analysis makes it easier to communicate impact in terms of:

Which of the following is a benefit of using a top-down approach when developing risk scenarios?

Applying statistical analysis methods to I&T risk scenarios is MOST appropriate when:

Which of the following is the MOST important factor to consider when developing effective risk scenarios?

Which of the following is a potential risk associated with IT hardware or devices?

Which of the following is the BEST way to minimize potential attack vectors on the enterprise network?