QUESTION: 713

Whose risk tolerance matters MOST when making a risk decision?

Customers who would be affected by a breach
The information security manager
The business process owner of the exposed assets
Auditors, regulators, and standards organizations

Answer(s): C

Reveal Solution Next Question

QUESTION: 714

Which of the following is the MOST effective way to mitigate identified risk scenarios?

Document the risk tolerance of the organization.
Assign ownership of the risk response plan.
Provide awareness in early detection of risk.
Perform periodic audits on identified risk areas.

Answer(s): B

Reveal Solution Next Question

QUESTION: 715

Management has required information security awareness training to reduce the risk associated with credential compromise. What is the BEST way to assess the effectiveness of the training?

Conduct social engineering testing.
Perform a vulnerability assessment.
Audit security awareness training materials.
Administer an end-of-training quiz.

Answer(s): A

Reveal Solution Next Question

QUESTION: 716

Which of the following is the MOST important outcome of reviewing the risk management process?

Improving the competencies of employees who performed the review
Assuring the risk profile supports the IT objectives
Determining what changes should be made to IS policies to reduce risk
Determining that procedures used in risk assessment are appropriate

Answer(s): B

Reveal Solution Next Question

Free CRISC Exam Braindumps (page: 179)

QUESTION: 713

QUESTION: 714

QUESTION: 715

QUESTION: 716