QUESTION: 289

You are the project manager of GHT project. You have analyzed the risk and applied appropriate controls. In turn, you got residual risk as a result of this. Residual risk can be used to determine which of the following?

Status of enterprise's risk
Appropriate controls to be applied next
The area that requires more control
Whether the benefits of such controls outweigh the costs

Answer(s): C,D

Explanation:

Residual risk can be used by management to determine:
Which areas require more control Whether the benefits of such controls outweigh the costs
As residual risk is the output that comes after applying appropriate controls, so it can also estimate the area which need more sophisticated control. If the cost of control is large that its benefits then no control is applied, hence residual risk can determine benefits of these controls over cost.

Incorrect Answers:
A: Status of enterprise's risk can be determined only after risk monitoring.
B: Appropriate control can only be determined as the result of risk assessment, not through residual risk.

Reveal Solution Next Question

QUESTION: 290

When it appears that a project risk is going to happen, what is this term called?

Issue
Contingency response
Trigger
Threshold

Answer(s): C

Explanation:

A trigger is a warning sign or a condition that a risk event is likely to occur within the project.

Incorrect Answers:
A: Issues are events that come about as a result of risk events. Risks become issues only after they have actually occurred.

B: A contingency response is a pre-planned response for a risk event, such as a rollback plan. D: A threshold is a limit that the risk passes to actually become an issue in the project.

Reveal Solution Next Question

QUESTION: 291

You work as a project manager for SoftTech Inc. You are working with the project stakeholders to begin the qualitative risk analysis process. Which of the following inputs will be needed for the qualitative risk analysis process in your project?
Each correct answer represents a complete solution. (Choose three.)

Project scope statement
Cost management plan
Risk register
Organizational process assets

Answer(s): A,C,D

Explanation:

The primary goal of qualitative risk analysis is to determine proportion of effect and theoretical response. The inputs to the Qualitative Risk Analysis process are:
Organizational process assets Project Scope Statement
Risk Management Plan Risk Register

Incorrect Answers:
B: The cost management plan is the input to the perform quantitative risk analysis process.

Reveal Solution Next Question

QUESTION: 292

Which of the following will significantly affect the standard information security governance model?

Currency with changing legislative requirements
Number of employees
Complexity of the organizational structure
Cultural differences between physical locations

Answer(s): C

Explanation:

Complexity of the organizational structure will have the most significant impact on the Information security governance model. Some of the elements that impact organizational structure are multiple business units and functions across the organization.

Incorrect Answers:
A: Currency with changing legislative requirements should not have major impact once good governance models are placed, hence, governance will help in effective management of the organization's ongoing compliance.

B, D: The numbers of employees and the distance between physical locations have less impact on Information security models as well-defined process, technology and people components together provide the proper governance.

Reveal Solution Next Question

Free CRISC Exam Braindumps (page: 73)

QUESTION: 289

Explanation:

QUESTION: 290

Explanation:

QUESTION: 291

Explanation:

QUESTION: 292

Explanation: