- (Exam Topic 3)
Which of the following is MOST important when developing risk scenarios?

1. A. Reviewing business impact analysis (BIA)
2. B. Collaborating with IT audit
3. C. Conducting vulnerability assessments
4. D. Obtaining input from key stakeholders

Correct Answer: D

- (Exam Topic 2)
A business manager wants to leverage an existing approved vendor solution from another area within the organization. Which of the following is the risk practitioner's BEST course of action?

1. A. Recommend allowing the new usage based on prior approval.
2. B. Request a new third-party review.
3. C. Request revalidation of the original use case.
4. D. Assess the risk associated with the new use case.

Correct Answer: D

- (Exam Topic 2)
Which of the following is MOST important for an organization that wants to reduce IT operational risk?

1. A. Increasing senior management's understanding of IT operations
2. B. Increasing the frequency of data backups
3. C. Minimizing complexity of IT infrastructure
4. D. Decentralizing IT infrastructure

Correct Answer: C

- (Exam Topic 3)
The PRIMARY advantage of involving end users in continuity planning is that they:

1. A. have a better understanding of specific business needs
2. B. can balance the overall technical and business concerns
3. C. can see the overall impact to the business
4. D. are more objective than information security management.

Correct Answer: A

- (Exam Topic 3)
Which of the following data would be used when performing a business impact analysis (BIA)?

1. A. Cost-benefit analysis of running the current business
2. B. Cost of regulatory compliance
3. C. Projected impact of current business on future business
4. D. Expected costs for recovering the business

Correct Answer: D