QUESTION: 877

Which of the following methods is an example of risk mitigation?

Outsourcing the IT activities and infrastructure
Taking out insurance coverage for IT-related incidents
Enforcing change and configuration management processes
Not providing capability for employees to work remotely

Answer(s): C

QUESTION: 878

Which of the following is the MOST important objective of establishing an enterprise risk management (ERM) function within an organization?

To have a standard risk management process for complying with regulations
To ensure risk profiles are presented in a consistent format within the organization
To have a unified approach to risk management across the organization
To optimize risk management resources across the organization

Answer(s): C

Reveal Solution Next Question

QUESTION: 879

Several newly identified risk scenarios are being integrated into an organization's risk register. The MOST appropriate risk owner would be the individual who:

is accountable for loss if the risk materializes.
is in charge of information security.
is responsible for enterprise risk management (ERM).
can implement remediation action plans.

Answer(s): A

Reveal Solution Next Question

QUESTION: 880

An organization practices the principle of least privilege. To ensure access remains appropriate, application owners should be required to review user access rights on a regular basis by obtaining:

security logs to determine the cause of invalid login attempts.
documentation indicating the intended users of the application.
an access control matrix and approval from the user's manager.
business purpose documentation and software license counts.

Answer(s): C

Reveal Solution Next Question

Free CRISC Exam Braindumps (page: 220)

QUESTION: 877

QUESTION: 878

QUESTION: 879

QUESTION: 880