QUESTION: 893

Which of the following would BEST assist in reconstructing the sequence of events following a security incident across multiple IT systems in the organization's network?

Centralized log management
Centralized vulnerability management
Network monitoring infrastructure
Incident management process

Answer(s): A

Reveal Solution Next Question

QUESTION: 894

Which of the following should be done FIRST when information is no longer required to support business objectives?

Assess the information against the retention policy.
Archive the information to a backup database.
Securely and permanently erase the information.
Protect the information according to the classification policy.

Answer(s): A

Reveal Solution Next Question

A deficient control has been identified which could result in great harm to an organization should a low frequency threat event occur. When communicating the associated risk to senior management, the risk practitioner should explain:

the current level of risk is within tolerance.
mitigation plans for threat events should be prepared in the current planning period.
an increase in threat events could cause a loss sooner than anticipated.
this risk scenario is equivalent to more frequent, but lower impact risk scenarios.

Answer(s): C

Reveal Solution Next Question

QUESTION: 896

Which of the following is the MOST important reason to link an effective key control indicator (KCI) to relevant key risk indicators (KRIs)?

To obtain business buy-in for investment in risk mitigation measures
To monitor the accuracy of threshold levels in metrics
To monitor changes in the risk environment
To provide input to management for the adjustment of risk appetite

Answer(s): C

Reveal Solution Next Question

Free CRISC Exam Braindumps (page: 224)

QUESTION: 893

QUESTION: 894

QUESTION: 895

QUESTION: 896