Question 1

Which of the following is the MOST important responsibility of an IT risk committee charged with overseeing IT risk management?

Options :

A : Conduct regular surveys to assess organizational risk awareness

B : Implement an industry-recognized IT risk management framework

C : Ensure significant risk scenarios are elevated to the board

D : Develop and communicate an IT risk RACI chart.

Answer: B

Question 2

Which of the following is the MOST effective key performance indicator (KPI) for change management?

Options :

A : Percentage of successful changes

B : Number of changes implemented

C : Percentage of changes with a fallback plan

D : Average time required to implement a change

Answer: A

Question 3

Which of the following is the PRIMARY responsibility of a risk owner?

Options :

A : Determining risk appetite and tolerance

B : Developing relevant control procedures

C : Deciding responses to identified risk

D : Implementing risk action plans

Answer: C

Question 4

Which of the following is the MOST important success factor when introducing risk management in an organization?

Options :

A : Establishing executive management support

B : Implementing a risk register

C : Assigning risk ownership

D : Defining a risk mitigation strategy and plan

Answer: C

Question 5

When a risk cannot be sufficiently mitigated through manual or automatic controls, which of the following options will BEST protect the enterprise from the potential financial impact of the risk?

Options :

A : Updating the IT risk registry

B : Insuring against the risk

C : Outsourcing the related business process to a third party

D : Improving staff-training in the risk area

Answer: B