Question 141

Wendy has identified a risk event in her project that has an impact of $75,000 and a 60 percent chance of happening. Through research, her project team learns that the risk impact can actually be reduced to just
$15,000 with only a ten percent chance of occurring. The proposed solution will cost $25,000. Wendy agrees to the $25,000 solution. What type of risk response is this?
  • Question 142

    An identified high probability risk scenario involving a critical, proprietary business function has an annualized cost of control higher than the annual loss expectancy. Which of the following is the BEST risk response?
  • Question 143

    Which of the following should be a risk practitioner's NEXT action after identifying a high probability of data loss in a system?
  • Question 144

    The PRIMARY reason for periodic penetration testing of Internet-facing applications is to:
  • Question 145

    Which of The following would offer the MOST insight with regard to an organization's risk culture?