Online Access Free IT-Risk-Fundamentals Exam Questions

Key risk indicators (KRIs) are metrics designed to:

• A.be a direct measure of risk for each business line.
• B.alert there is an increased chance of exceeding risk appetite.
• C.measure current risk levels in comparison to past levels.

The MOST important reason to monitor implemented controls is to ensure the controls:

• A.mitigate risk associated with regulatory noncompliance.
• B.enable IT operations to meet agreed service levels.
• C.are effective and manage risk to the desired level.

Which of the following would have the MOST impact on the accuracy and appropriateness of plans associated with business continuity and disaster recovery?

• A.Changes to the business impact assessment (BIA)
• B.Data backups being moved to the cloud
• C.Material updates to the incident response plan

Which type of assessment evaluates the changes in technical or operating environments that could result in adverse consequences to an enterprise?

• A.Control self-assessment
• B.Threat assessment
• C.Vulnerability assessment

A business impact analysis (BIA) generates the MOST benefit when:

• A.using standardized frequency and impact metrics.
• B.keeping impact criteria and cost data as generic as possible.
• C.measuring existing impact criteria exclusively in financial terms.