CRISC Exam Question 591
Which of the following data would be used when performing a business impact analysis (BIA)?
CRISC Exam Question 592
A new international data privacy regulation requires personal data to be disposed after the specified retention period, which is different from the local regulatory requirement. Which of the following is the risk practitioner's BEST recommendation to resolve the disparity?
CRISC Exam Question 593
A company has recently acquired a customer relationship management (CRM) application from a certified software vendor. Which of the following will BE ST help lo prevent technical vulnerabilities from being exploded?
CRISC Exam Question 594
Which of the following is the HIGHEST risk of a policy that inadequately defines data and system ownership?
CRISC Exam Question 595
A systems interruption has been traced to a personal USB device plugged into the corporate network by an IT employee who bypassed internal control procedures. Of the following, who should be accountable?