- (Exam Topic 1)
The PRIMARY benefit of maintaining an up-to-date risk register is that it helps to:

1. A. implement uniform controls for common risk scenarios.
2. B. ensure business unit risk is uniformly distributed.
3. C. build a risk profile for management review.
4. D. quantify the organization's risk appetite.

Correct Answer: C

- (Exam Topic 1)
An organization has identified a risk exposure due to weak technical controls in a newly implemented HR system. The risk practitioner is documenting the risk in the risk register. The risk should be owned by the:

1. A. chief risk officer.
2. B. project manager.
3. C. chief information officer.
4. D. business process owner.

Correct Answer: D

- (Exam Topic 3)
Which of the following describes the relationship between Key risk indicators (KRIs) and key control indicators (KCIS)?

1. A. KCIs are independent from KRIs KRIs.
2. B. KCIs and KRIs help in determining risk appetite.
3. C. KCIs are defined using data from KRIs.
4. D. KCIs provide input for KRIs

Correct Answer: D

- (Exam Topic 2)
What is the GREATEST concern with maintaining decentralized risk registers instead of a consolidated risk register?

1. A. Aggregated risk may exceed the enterprise's risk appetite and tolerance.
2. B. Duplicate resources may be used to manage risk registers.
3. C. Standardization of risk management practices may be difficult to enforce.
4. D. Risk analysis may be inconsistent due to non-uniform impact and likelihood scales.

Correct Answer: C

- (Exam Topic 2)
An IT license audit has revealed that there are several unlicensed copies of co be to:

1. A. immediately uninstall the unlicensed software from the laptops
2. B. centralize administration rights on laptops so that installations are controlled
3. C. report the issue to management so appropriate action can be taken.
4. D. procure the requisite licenses for the software to minimize business impact.

Correct Answer: B