Home

Home / Isaca / IT Risk Fundamentals

Question list

List of questions

Question 1

(0)

Which of the following is of GREATEST concern when aggregating risk information in management reports?

Question 2

(0)

To be effective, risk reporting and communication should provide:

Question 3

(0)

For risk reporting to adequately reflect current risk management capabilities, the risk report should be based on the enterprise:

Question 4

(0)

Which of the following is the MOST likely reason to perform a qualitative risk analysis?

Question 5

(0)

Which of the following is considered an exploit event?

Question 6

(0)

Potential losses resulting from employee errors and system failures are examples of:

Question 7

(0)

Which of the following would be considered a cyber-risk?

Question 8

(0)

Which of the following is the BEST way to interpret enterprise standards?

Question 9

(0)

Which of the following is the MAIN objective of governance?

Question 10

(0)

Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?

Open VPLUS File

Convert VPLUS to PDF

Related questions

Which of the following is used to estimate the frequency and magnitude of a given risk scenario?

Which of the following is the PRIMARY concern with vulnerability assessments?

Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?

An enterprise has moved its data center from a flood-prone area where it had experienced significant service disruptions to one that is not a flood zone. Which risk response strategy has the organization selected?

Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?

Which of the following is the MAIN objective of governance?

Which of the following would be considered a cyber-risk?

Which of the following is of GREATEST concern when aggregating risk information in management reports?

Which of the following statements on an organization's cybersecurity profile is BEST suited for presentation to management?

The MOST important reason to monitor implemented controls is to ensure the controls:

Question 12 - IT Risk Fundamentals discussion

Report

To establish an enterprise risk appetite, an organization should:

A.

normalize risk taxonomy across the organization.

B.

aggregate risk statements for all lines of business.

C.

establish risk tolerance for each business unit.

Show Answer

asked 18/11/2024

Sam Patel

34 questions

User

Your answer: A B C

0 comments

Sorted by

Leave a comment first