Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 156)

Question 771

Which of the following statements are true for risk communication? Each correct answer represents a complete solution. Choose three.

A.It requires a practical and deliberate scheduling approach to identify stakeholders, actions, and concerns.

B.It helps in allocating the information concerning risk among the decision-makers.

C.It requires investigation and interconnectivity of procedural, legal, social, political, and economic factors.

D.It defines the issue of what a stakeholders does, not just what it says.

E.Explanation:
Risk communication is the process of exchanging information and views about risks among stakeholders, such as groups, individuals, and institutions. Risk communication is mostly concerned with the nature of risk or expressing concerns, views, or reactions to risk managers or institutional bodies for risk management. The key plan to consider and communicate risk is to categorize and impose priorities, and acquire suitable measures to reduce risks. It is important throughout any crisis to put across multifaceted information in a simple and clear manner. Risk communication helps in switching or allocating the information concerning risk among the decision-maker and the stakeholders. Risk communication can be explained more clearly with the help of the following definitions: It defines the issue of what a group does, not just what it says. It must take into account the valuable element in user's perceptions of risk. It will be more valuable if it is thought of as conversation, not instruction. Risk communication is a fundamental and continuing element of the risk analysis exercise, and the involvement of the stakeholder group is from the beginning. It makes the stakeholders conscious of the process at each phase of the risk assessment. It helps to guarantee that the restrictions, outcomes, consequence, logic, and risk assessment are undoubtedly understood by all the stakeholders.

Question 772

Which of the following controls is an example of non-technical controls?

A.Access control

B.Physical security

C.Intrusion detection system

D.Encryption

E.Explanation:
Physical security is an example of non-technical control. It comes under the family of operational controls.

Question 773

Which of the following are external risk factors?
Each correct answer represents a complete solution. Choose three.

A.Geopolitical situation

B.Complexity of the enterprise

C.Market

D.Competition

E.Explanation:
These three are external risk factors as they lie outside the enterprise's control.

Question 774

After the review of a risk record, internal audit questioned why the risk was lowered from medium to low. Which of the following is the BEST course of action in responding to this inquiry?

A.Obtain industry benchmarks related to the specific risk.

B.Reopen the risk issue and complete a full assessment.

C.Provide justification for the lower risk rating.

D.Notify the business at the next risk briefing.

Question 775

What type of policy would an organization use to forbid its employees from using organizational e-mail for personal use?

A.Anti-harassment policy

B.Acceptable use policy

C.Intellectual property policy

D.Privacy policy

Other Version: 3354ISACA.CRISC.v2025-07-19.q999; 6480ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12549ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 158PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 149Salesforce.Data-Architect.v2025-09-05.q216; 144Adobe.AD0-E605.v2025-09-05.q50

Question 771

Question 772

Question 773

Question 774

Question 775

Download PDF File