Isaca CRISC Practice Test - Questions Answers, Page 157

Within the three lines of defense model, the PRIMARY responsibility for ensuring risk mitigation controls are properly configured belongs with:

A business unit is updating a risk register with assessment results for a key project. Which of the following is MOST important to capture in the register?

During the creation of an organization's IT risk management program, the BEST time to identify key risk indicators (KRIs) is while:

An organization has adopted an emerging technology without following proper processes. Which of the following is the risk practitioner's BEST course of action to address this risk?

Which of the following BEST reduces the likelihood of fraudulent activity that occurs through use of a digital wallet?

A risk practitioner has been notified of a social engineering attack using artificial intelligence (AI) technology to impersonate senior management personnel. Which of the following would BEST mitigate the impact of such attacks?

Which of the following is the MOST important aspect of a key risk indicator (KRI)?

Which of the following will help ensure the effective decision-making of an IT risk management committee?

A risk practitioner is preparing a business case for purchasing a cyber insurance policy. Which of the following is the MOST useful and comprehensive information to include in the business case to obtain management buy-in?