Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 89

Question list

List of questions

Question 881

(0)

Which of the following would be the GREATEST challenge when implementing a corporate risk framework for a global organization?

Question 882

(0)

A risk practitioner has discovered a deficiency in a critical system that cannot be patched. Which of the following should be the risk practitioner's FIRST course of action?

Question 883

(0)

Which of the following practices MOST effectively safeguards the processing of personal data?

Question 884

(0)

Which of the following should be the PRIMARY goal of developing information security metrics?

Question 885

(0)

An IT department has organized training sessions to improve user awareness of organizational information security policies. Which of the following is the BEST key performance indicator (KPI) to refl

Question 886

(0)

A maturity model is MOST useful to an organization when it:

Question 887

(0)

A risk practitioner is preparing a report to communicate changes in the risk and control environment. The BEST way to engage stakeholder attention is to:

Question 888

(0)

The PRIMARY advantage of involving end users in continuity planning is that they:

Question 889

(0)

Which of the following is MOST important to the effectiveness of key performance indicators (KPIs)?

Question 890

(0)

Which of the following is the PRIMARY reason to adopt key control indicators (KCIs) in the risk monitoring and reporting process?

Question 881

Which of the following would be the GREATEST challenge when implementing a corporate risk framework for a global organization?

Privacy risk controls

Business continuity

Risk taxonomy

Management support

Show Answer Comment (0)

Question 882

A risk practitioner has discovered a deficiency in a critical system that cannot be patched. Which of the following should be the risk practitioner's FIRST course of action?

Report the issue to internal audit.

Submit a request to change management.

Conduct a risk assessment.

Review the business impact assessment.

Show Answer Comment (0)

Question 883

Which of the following practices MOST effectively safeguards the processing of personal data?

Personal data attributed to a specific data subject is tokenized.

Data protection impact assessments are performed on a regular basis.

Personal data certifications are performed to prevent excessive data collection.

Data retention guidelines are documented, established, and enforced.

Show Answer Comment (0)

Question 884

Which of the following should be the PRIMARY goal of developing information security metrics?

Raising security awareness

Enabling continuous improvement

Identifying security threats

Ensuring regulatory compliance

Show Answer Comment (0)

An IT department has organized training sessions to improve user awareness of organizational information security policies. Which of the following is the BEST key performance indicator (KPI) to reflect effectiveness of the training?

Number of training sessions completed

Percentage of staff members who complete the training with a passing score

Percentage of attendees versus total staff

Percentage of staff members who attend the training with positive feedback

Show Answer Comment (0)

Question 886

A maturity model is MOST useful to an organization when it:

benchmarks against other organizations

defines a qualitative measure of risk

provides a reference for progress

provides risk metrics.

Show Answer Comment (0)

Question 887

A risk practitioner is preparing a report to communicate changes in the risk and control environment. The BEST way to engage stakeholder attention is to:

include detailed deviations from industry benchmarks,

include a summary linking information to stakeholder needs,

include a roadmap to achieve operational excellence,

publish the report on-demand for stakeholders.

Show Answer Comment (0)