ISACA CRISC Practice QuestionsISACA® CRISC®
- Exam | Comprehensive Questions and Answers
| A+ Graded | With Expert Solutions
Save
Terms in this set (59)
IT risk is measured by its: B. Impact on business operations
A. Level of damage to IT systems.
B. Impact on business operations.
C. Cost oc countermeasures
D. Annual loss expectancy
Risk management is the coordinated activities to direct and control
an enterprise regarding risks. (Inform --> direct --
> influence)
Which of the following is MOST D. Business objectives and operation
important to determine when
defining risk management
strategies?
A. Risk assessment criteria
B. IT architecture complexity
C. Enterprise disaster recovery plan
D. Business objectives and
operation
, Four ways to respond to risk Access, Transfer, Mitigate, and Avoid
Organizational culture relating to Vulnerable, reactive, compliant, proactive, and
risk includes resilient
Risk communication benefits more informed risk decisions, greater awareness
includes among stakeholders, and transparency to
external stakeholders.
Responsible Key Risk Roles are Risk Manager, risk analyst, and control stewards
Accountable key risk roles are Risk owner and control owner
Who is responsible for explaining B. Chief Risk Officer
the ramifications of a new zero-day
exploit to the enterprise to senior
management?
A. Chief operating officer
B. Chief risk officer
C. Chief information security officer
D. Chief information officer
The risk to an information system B. Senior management
that supports a critical business
process is owned by:
A. the IT Director
B. Senior Management
C. The risk management
department
D. The system users
What are the four core risk 1. Establish and maintain a common risk view
governance objectives? 2.Integrated risk management into the enterprise
3. Make risk-aware business decisions
4. Ensure that risk management controls are
implemented and operating correctly
- Exam | Comprehensive Questions and Answers
| A+ Graded | With Expert Solutions
Save
Terms in this set (59)
IT risk is measured by its: B. Impact on business operations
A. Level of damage to IT systems.
B. Impact on business operations.
C. Cost oc countermeasures
D. Annual loss expectancy
Risk management is the coordinated activities to direct and control
an enterprise regarding risks. (Inform --> direct --
> influence)
Which of the following is MOST D. Business objectives and operation
important to determine when
defining risk management
strategies?
A. Risk assessment criteria
B. IT architecture complexity
C. Enterprise disaster recovery plan
D. Business objectives and
operation
, Four ways to respond to risk Access, Transfer, Mitigate, and Avoid
Organizational culture relating to Vulnerable, reactive, compliant, proactive, and
risk includes resilient
Risk communication benefits more informed risk decisions, greater awareness
includes among stakeholders, and transparency to
external stakeholders.
Responsible Key Risk Roles are Risk Manager, risk analyst, and control stewards
Accountable key risk roles are Risk owner and control owner
Who is responsible for explaining B. Chief Risk Officer
the ramifications of a new zero-day
exploit to the enterprise to senior
management?
A. Chief operating officer
B. Chief risk officer
C. Chief information security officer
D. Chief information officer
The risk to an information system B. Senior management
that supports a critical business
process is owned by:
A. the IT Director
B. Senior Management
C. The risk management
department
D. The system users
What are the four core risk 1. Establish and maintain a common risk view
governance objectives? 2.Integrated risk management into the enterprise
3. Make risk-aware business decisions
4. Ensure that risk management controls are
implemented and operating correctly
