Question 1

What is a benefit of using the top-down approach in enterprise risk management?

Options :

A : Focusing on hypothetical situations envisioned by the people performing job functions

B : Identifying and analyzing risk events specific to individual enterprise situations

C : Developing concrete, customized scenarios based on enterprise context

D : Easier to achieve management buy-in even if management is not interested in IT

Answer: D

Question 2

Which statement accurately describes threat actors?

Options :

A : Threat actors encompass a variety of potential sources beyond just humans.

B : Every threat is associated with a threat actor.

C : Threat actors are limited to humans.

D : Threat actors encompass competitors as well.

Answer: A

Question 3

The status of IT-related risk should to be communicated to the relevant stakeholders and:

Options :

A : Express risk in a manner that is useful to support business decisions.

B : Never updated

C : Should focus on best-case and least-probable scenarios.

D : Be as concise as possible and as such exclude probabilities of gain and loss.

Answer: A

Question 4

A leading key risk indicator gathers and quantifies data:

Options :

A : Pertaining to a service level availability goal.

B : Relating ot risk that has not yet been realized.

C : Every day

D : Pertaining to meeting a performance target.

Answer: B

Question 5

What does KPI stand for?

Options :

A : Key Privacy Indicator

B : Key Performance Indicator

C : Key People Indicator

D : Key Promise Indicator

Answer: B