IT-Risk-Fundamentals 무료 덤프문제 온라인 액세스

As part of an I&T related risk assessment, which of the following should be reviewed to obtain an initial view of overall I&T related risk for the enterprise?

• A.Components of the risk universe at a high level
• B.Components of the risk register with remediation plans
• C.Threats and vulnerabilities for each risk factor identified

How does an enterprise decide how much risk it is willing to take to meet its business objectives?

• A.By identifying the risk conditions of the business and the impact of the loss if these risks materialize
• B.By conducting research on industry standards for acceptable risk based on similar businesses
• C.By surveying business initiatives to determine what risks would cease their operations

A key risk indicator (KRI) is PRIMARILY used for which of the following purposes?

• A.Optimizing risk management
• B.Facilitating dashboard reporting
• C.Predicting risk events

Which of the following BEST supports a risk-aware culture within an enterprise?

• A.Risk is identified, documented, and discussed to make business decisions.
• B.Risk issues and negative outcomes are only shared within a department.
• C.The enterprise risk management (ERM) function manages all risk-related activities.

Detailed risk management reports should be targeted to a specific audience based on:

• A.need to know.
• B.seniority levels in the enterprise.
• C.industry benchmarks.