QUESTION: 677

An organization has identified a risk exposure due to weak technical controls in a newly implemented HR system. The risk practitioner is documenting the risk in the risk register. The risk should be owned by the:

business process owner.
chief information officer.
project manager.
chief risk officer.

Answer(s): A

Reveal Solution Next Question

QUESTION: 678

The MAIN reason for creating and maintaining a risk register is to:

account for identified key risk factors.
ensure assets have low residual risk.
define the risk assessment methodology.
assess effectiveness of different projects.

Answer(s): A

Reveal Solution Next Question

QUESTION: 679

A risk practitioner’s PRIMARY focus when validating a risk response action plan should be that risk response:

advances business objectives.
quantifies risk impact.
reduces risk to an acceptable level.
aligns with business strategy.

Answer(s): C

Reveal Solution Next Question

QUESTION: 680

Which of the following is the MAIN benefit of involving stakeholders in the selection of key risk indicators (KRIs)?

Leveraging existing metrics
Optimizing risk treatment decisions
Obtaining buy-in from risk owners
Improving risk awareness

Answer(s): C

Reveal Solution Next Question

Free CRISC Exam Braindumps (page: 170)

QUESTION: 677

QUESTION: 678

QUESTION: 679

QUESTION: 680