Online Access Free CIS-RCI Exam Questions

Entities can belong 10 more than one of this classification. What is the classification?

• A.Departments
• B.Entity classes
• C.information objects
• D.Entity types

For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)

• A.Controls are identified from library
• B.Controls are identified from indicator results
• C.Controls are identified from library and ad-hoc
• D.Controls are identified ad-hoc
• E.Controls are identified from related issues

Which table stored the links from Entity to Entity Types?

• A.[sn_grc_m2m_profile_profile_type]
• B.[sn_compliance_m2m_profile_profile_type]
• C.[sn_risk_m2m_risk_profile]
• D.[sn_compliance_m2m_policy_profile]

It an implementer warned to roll-up the qualitative values for a risk assessment methodology, what field would they update on the RAM?

• A.Calculate ale based on
• B.Roll-up scores
• C.Roll-up Annualized Loss Expectancy
• D.Calculate score based on

On which records is the entity a required field? (Choose two.)

• A.Risk statement
• B.Policy
• C.Control
• D.Risk
• E.Control objective