Isaca CRISC Practice Test - Questions Answers, Page 120
List of questions
Which of the following should be considered FIRST when creating a comprehensive IT risk register?
Which of the following observations from a third-party service provider review would be of GREATEST concern to a risk practitioner?
Which of the following is the MOST important characteristic of a key risk indicator (KRI) to enable decision-making?
A poster has been displayed in a data center that reads. 'Anyone caught taking photographs in the data center may be subject to disciplinary action.' Which of the following control types has been implemented?
Which of the following is MOST important when determining risk appetite?
Which of the following should be management's PRIMARY consideration when approving risk response action plans?
When classifying and prioritizing risk responses, the areas to address FIRST are those with:
A legacy application used for a critical business function relies on software that has reached the end of extended support Which of the following is the MOST effective control to manage this application?
A risk practitioner notices a risk scenario associated with data loss at the organization's cloud provider is assigned to the provider Who should the risk scenario be reassigned to?
Who is MOST important lo include in the assessment of existing IT risk scenarios?
Question