- (Exam Topic 1)
To implement the MOST effective monitoring of key risk indicators (KRIs), which of the following needs to be in place?

1. A. Threshold definition
2. B. Escalation procedures
3. C. Automated data feed
4. D. Controls monitoring

Correct Answer: A

- (Exam Topic 2)
A risk practitioner notices a trend of noncompliance with an IT-related control. Which of the following would BEST assist in making a recommendation to management?

1. A. Assessing the degree to which the control hinders business objectives
2. B. Reviewing the IT policy with the risk owner
3. C. Reviewing the roles and responsibilities of control process owners
4. D. Assessing noncompliance with control best practices

Correct Answer: A

- (Exam Topic 3)
Recovery the objectives (RTOs) should be based on

1. A. minimum tolerable downtime
2. B. minimum tolerable loss of data.
3. C. maximum tolerable downtime.
4. D. maximum tolerable loss of data

Correct Answer: C

- (Exam Topic 2)
Which of the following is the PRIMARY responsibility of the first line of defense related to computer-enabled fraud?

1. A. Providing oversight of risk management processes
2. B. Implementing processes to detect and deter fraud
3. C. Ensuring that risk and control assessments consider fraud
4. D. Monitoring the results of actions taken to mitigate fraud

Correct Answer: B

- (Exam Topic 3)
Which of tie following is We MOST important consideration when implementing ethical remote work monitoring?

1. A. Monitoring is only conducted between official hours of business
2. B. Employees are informed of how they are bong monitored
3. C. Reporting on nonproductive employees is sent to management on a scheduled basis
4. D. Multiple data monitoring sources are integrated into security incident response procedures

Correct Answer: B