which of the following?
You are working in an enterprise. You project deals with important files that are stored on the
computer. You have identified the risk of the failure of operations. To address this risk of failure,
you have guided the system administrator sign off on the daily backup. This scenario is an
example of which of the following?
Which of the following role carriers are responsible for setting up the risk governance process, establishing
Which of the following role carriers are responsible for setting up the risk governance process,
establishing and maintaining a common risk view, making risk-aware business decisions, and
setting the enterprise’s risk culture?
Each correct answer represents a complete solution. Choose two.
True or false?
An advantage of a continuous audit approach is that it can improve system security when used in
time-sharing environments that process a large number of transactions. True or false?
Which of the following processes are covered by Service Strategy?
Which of the following processes are covered by Service Strategy? Each correct answer
represents a complete solution. Choose all that apply.
The MOST important reason for conducting periodic risk assessments is because:
The MOST important reason for conducting periodic risk assessments is because:
what kind of risk?
Risks to an organization’s image are referred to as what kind of risk?
what is the auditor’s primary responsibility?
If an IS auditor finds evidence of risk involved in not implementing proper segregation of duties,
such as having the security administrator perform an operations function, what is the auditor’s
primary responsibility?
which a threat is expected to occur?
Which of the following terms related to risk management represents the estimated frequency at
which a threat is expected to occur?
Which of the following BEST indicates a successful risk management practice?
Which of the following BEST indicates a successful risk management practice?
Which of the following steps ensure effective communication of the risk analysis results to relevant stakehold
Which of the following steps ensure effective communication of the risk analysis results to relevant
stakeholders? Each correct answer represents a complete solution. Choose three.