Question 1

How can metrics on training effectiveness and needs for additional training be gathered?

Options :

A : Questionnaires, testing, help desk activity, operational errors

B : Management interviews only

C : Audits only

D : Incident reporting only

Answer: A

Question 2

What is the significance of the Risk Roles and Responsibilities Matrix (RRRM)?

Options :

A : IT governance

B : Data management

C : Describing the interaction between three lines of defense

D : Enterprise risk management

Answer: C

Question 3

The status of IT-related risk should to be communicated to the relevant stakeholders and:

Options :

A : Express risk in a manner that is useful to support business decisions.

B : Never updated

C : Should focus on best-case and least-probable scenarios.

D : Be as concise as possible and as such exclude probabilities of gain and loss.

Answer: A

Question 4

Who is responsible for financial management in an enterprise?

Options :

A : CIO

B : CRO

C : CFO

Answer: C

Question 5

What does KPI stand for?

Options :

A : Key Privacy Indicator

B : Key Performance Indicator

C : Key People Indicator

D : Key Promise Indicator

Answer: B