Question 341

What is the MAIN purpose of designing risk management programs?
  • Question 342

    A risk practitioner identifies a database application that has been developed and implemented by the business independently of IT. Which of the following is the BEST course of action?
  • Question 343

    Which of the following should be the PRIMARY focus of an IT risk awareness program?
  • Question 344

    An identified high probability risk scenario involving a critical, proprietary business function has an annualized cost of control higher than the annual loss expectancy. Which of the following is the BEST risk response?
  • Question 345

    Which of the following tasks should be completed prior to creating a disaster recovery plan (DRP)?