QUESTION: 489

Which of the following should be of MOST concern to a risk practitioner reviewing findings from a recent audit of an organization’s data center?

Ownership of an audit finding has not been assigned
The data center is not fully redundant
Audit findings were not communicated to senior management
Key risk indicators (KRIs) for the data center do not include critical components

Answer(s): A

Reveal Solution Next Question

A systems interruption has been traced to a personal USB device plugged into the corporate network by an IT employee who bypassed internal control procedures. Of the following, who should be accountable?

Chief risk officer (CRO)
Business continuity manager (BCM)
Human resources manager (HRM)
Chief information officer (CIO)

Answer(s): D

Reveal Solution Next Question

QUESTION: 491

When developing risk scenarios, it is MOST important to ensure they are:

structured and reportable
flexible and scalable
relevant and realistic
comprehensive and detailed

Answer(s): C

Reveal Solution Next Question

QUESTION: 492

An organization is planning to acquire a new financial system. Which of the following stakeholders would provide the MOST relevant information for analyzing the risk associated with the new IT solution?

Process owner
Internal auditor
Risk manager
Project sponsor

Answer(s): C

Reveal Solution Next Question

Free CRISC Exam Braindumps (page: 123)

QUESTION: 489

QUESTION: 490

QUESTION: 491

QUESTION: 492