Isaca CRISC Practice Test - Questions Answers, Page 67

An organization learns of a new ransomware attack affecting organizations worldwide. Which of the following should be done FIRST to reduce the likelihood of infection from the attack?

Which of the following is the MOST important objective of establishing an enterprise risk management (ERM) function within an organization?

Which of the following is the BEST key control indicator (KCI) for a vulnerability management program?

Who is BEST suited to determine whether a new control properly mitigates data loss risk within a system?

Which of the following BEST facilitates the mitigation of identified gaps between current and desired risk environment states?

An application runs a scheduled job that compiles financial data from multiple business systems and updates the financial reporting system. If this job runs too long, it can delay financial reporting. Which of the following is the risk practitioner's BEST recommendation?

Which of the following roles is BEST suited to help a risk practitioner understand the impact of IT-related events on business objectives?

Which of the following is the MOST effective control to ensure user access is maintained on a least-privilege basis?

A deficient control has been identified which could result in great harm to an organization should a low frequency threat event occur. When communicating the associated risk to senior management the risk practitioner should explain: