- (Exam Topic 2)
A risk assessment has identified increased losses associated with an IT risk scenario. It is MOST important for the risk practitioner to:

1. A. update the risk rating.
2. B. reevaluate inherent risk.
3. C. develop new risk scenarios.
4. D. implement additional controls.

Correct Answer: A

- (Exam Topic 2)
Which of the following is the MOST important objective of regularly presenting the project risk register to the project steering committee?

1. A. To allocate budget for resolution of risk issues
2. B. To determine if new risk scenarios have been identified
3. C. To ensure the project timeline is on target
4. D. To track the status of risk mitigation actions

Correct Answer: D

- (Exam Topic 1)
Which of the following is the MOST important element of a successful risk awareness training program?

1. A. Customizing content for the audience
2. B. Providing incentives to participants
3. C. Mapping to a recognized standard
4. D. Providing metrics for measurement

Correct Answer: A

- (Exam Topic 2)
Which of the following requirements is MOST important to include in an outsourcing contract to help ensure sensitive data stored with a service provider is secure?

1. A. A third-party assessment report of control environment effectiveness must be provided at least annually.
2. B. Incidents related to data toss must be reported to the organization immediately after they occur.
3. C. Risk assessment results must be provided to the organization at least annually.
4. D. A cyber insurance policy must be purchased to cover data loss events.

Correct Answer: A

- (Exam Topic 3)
Which of the following practices BEST mitigates risk related to enterprise-wide ethical decision making in a multi-national organization?

1. A. Customized regional training on local laws and regulations
2. B. Policies requiring central reporting of potential procedure exceptions
3. C. Ongoing awareness training to support a common risk culture
4. D. Zero-tolerance policies for risk taking by middle-level managers

Correct Answer: A