- (Exam Topic 2)
An organization is measuring the effectiveness of its change management program to reduce the number of unplanned production changes. Which of the following would be the BEST metric to determine if the program is performing as expected?

1. A. Decrease in the time to move changes to production
2. B. Ratio of emergency fixes to total changes
3. C. Ratio of system changes to total changes
4. D. Decrease in number of changes without a fallback plan

Correct Answer: B

- (Exam Topic 2)
An organization has introduced risk ownership to establish clear accountability for each process. To ensure effective risk ownership, it is MOST important that:

1. A. senior management has oversight of the process.
2. B. process ownership aligns with IT system ownership.
3. C. segregation of duties exists between risk and process owners.
4. D. risk owners have decision-making authority.

Correct Answer: A

- (Exam Topic 3)
Which of the following BEST enables an organization to determine whether external emerging risk factors will impact the organization's risk profile?

1. A. Control identification and mitigation
2. B. Adoption of a compliance-based approach
3. C. Prevention and detection techniques
4. D. Scenario analysis and stress testing

Correct Answer: D

- (Exam Topic 2)
Which of the following is MOST important to understand when developing key risk indicators (KRIs)?

1. A. KRI thresholds
2. B. Integrity of the source data
3. C. Control environment
4. D. Stakeholder requirements

Correct Answer: B

- (Exam Topic 3)
Which of the following is the BEST key control indicator (KCI) for risk related to IT infrastructure failure?

1. A. Number of times the recovery plan is reviewed
2. B. Number of successful recovery plan tests
3. C. Percentage of systems with outdated virus protection
4. D. Percentage of employees who can work remotely

Correct Answer: B