Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 47)

What is the PRIMARY reason to categorize risk scenarios by business process?

A.To determine aggregated risk levels by risk owner

B.To identify situations that result in over-control

C.To enable management to implement cost-effective risk mitigation

D.To show business activity deficiencies that need to be improved

Which of the following is true for risk evaluation?

A.Risk evaluation is done only when there is significant change.

B.Risk evaluation is done once a year for every business processes.

C.Risk evaluation is done annually or when there is significant change.

D.Risk evaluation is done every four to six months for critical business processes.

Which of the following BEST indicates the condition of a risk management program?

A.Number of controls

B.Level of financial support

C.Number of risk register entries

D.Amount of residual risk

An IT control gap has been identified in a key process. Who would be the MOST appropriate owner of the risk associated with this gap?

A.Operational risk manager

B.Business process owner

C.Key control owner

D.Chief information security officer (CISO)

Which of the following is the MOST important input when developing risk scenarios?

A.Key performance indicators

B.Business objectives

C.The organization's risk framework

D.Risk appetite

Other Version: 3477ISACA.CRISC.v2025-07-19.q999; 6557ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12585ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 106Oracle.1z0-1196-25.v2025-09-12.q18; 104NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 259CFAInstitute.ESG-Investing.v2025-09-08.q173; 243PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Download PDF File