Isaca CRISC Practice Test - Questions Answers, Page 88

Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of a disaster recovery test of critical business processes?

A financial institution has identified high risk of fraud in several business applications. Which of the following controls will BEST help reduce the risk of fraudulent internal transactions?

An IT department originally planned to outsource the hosting of its data center at an overseas location to reduce operational expenses. After a risk assessment, the department has decided to keep the data center in-house. How should the risk treatment response be reflected in the risk register?

Which element of an organization's risk register is MOST important to update following the commissioning of a new financial reporting system?

Which of the following is a drawback in the use of quantitative risk analysis?

Which of the following would present the MOST significant risk to an organization when updating the incident response plan?

An organization is implementing encryption for data at rest to reduce the risk associated with unauthorized access. Which of the following MUST be considered to assess the residual risk?

Which of the following would BEST indicate to senior management that IT processes are improving?

Which of the following is the FIRST step when conducting a business impact analysis (BIA)?