Question 1

What is the role of a values statement in an organization?

Options :

A :

A values statement reflects the shared beliefs and expectations of the organization-s leadership, employees, and stakeholders and serves as a guide for establishing a positive and productive organizational culture.

B :

A values statement is a legal document that outlines the financial obligations and liabilities of the organization that contribute to its value.

C :

A values statement is a formal agreement between the organization and its suppliers to ensure the timely delivery of goods and services that are essential to building the organization’s value.

D : A values statement is a marketing tool used to attract new customers and investors to the organization.

Answer: A

Question 2

What does "Effectiveness" refer to when assessing Total Performance in the GRC Capability Model?

Options :

A :

The ability of a program to ensure compliance with laws and regulations and avoid issues or incidents of noncompliance

B :

The speed at which a program is implemented and executed with a good design that can be implemented in every department

C :

The soundness and logical design of a program, its alignment with best practices, coverage of topical areas, and impact on intended business objectives

D : The cost savings achieved by implementing a GRC program

Answer: C

Question 3

In the context of the Maturity Model, what characterizes practices at Level I?

Options :

A : Practices are improvised, ad hoc, and often chaotic.

B : Practices are formally documented and consistently managed.

C : Practices are measured and managed with data-driven evidence.

D : Practices are consistently improved over time.

Answer: A

Question 4

What is the design option that involves ceasing all activity or terminating sources that give rise to the opportunity, obstacle, or obligation?

Options :

A : Accept

B : Share

C : Avoid

D : Control

Answer: C

Question 5

In the IACM, what are the two types of Proactive Actions & Controls?

Options :

A : Reactive Actions & Controls and Passive Actions & Controls

B : Prevent/Deter Actions & Controls and Promote/Enable Actions & Controls

C : Centralized Actions & Controls and Decentralized Actions & Controls

D : Quantitative Actions & Controls and Qualitative Actions & Controls

Answer: B