- (Exam Topic 3)
A management team is on an aggressive mission to launch a new product to penetrate new markets and overlooks IT risk factors, threats, and vulnerabilities. This scenario BEST demonstrates an organization's risk:

1. A. management.
2. B. tolerance.
3. C. culture.
4. D. analysis.

Correct Answer: C

- (Exam Topic 1)
Which of the following would be MOST helpful when estimating the likelihood of negative events?

1. A. Business impact analysis
2. B. Threat analysis
3. C. Risk response analysis
4. D. Cost-benefit analysis

Correct Answer: B

- (Exam Topic 3)
A risk practitioner has collaborated with subject matter experts from the IT department to develop a large list of potential key risk indicators (KRIs) for all IT operations within the organization Of the following, who should review the completed list and select the appropriate KRIs for implementation?

1. A. IT security managers
2. B. IT control owners
3. C. IT auditors
4. D. IT risk owners

Correct Answer: D

- (Exam Topic 1)
Which of the following should be the risk practitioner s PRIMARY focus when determining whether controls are adequate to mitigate risk?

1. A. Sensitivity analysis
2. B. Level of residual risk
3. C. Cost-benefit analysis
4. D. Risk appetite

Correct Answer: C

- (Exam Topic 3)
Which of the following is the MOST important objective of an enterprise risk management (ERM) program?

1. A. To create a complete repository of risk to the organization
2. B. To create a comprehensive view of critical risk to the organization
3. C. To provide a bottom-up view of the most significant risk scenarios
4. D. To optimize costs of managing risk scenarios in the organization

Correct Answer: B