Question 26
If preventive controls cannot be implemented due to technology limitations, which of the following should be done FIRST to reduce risk?
Question 27
An organization's HR department has implemented a policy requiring staff members to take a minimum of five consecutive days leave per year to mitigate the risk of malicious insider activities. Which of the following is the BEST key performance indicator (KPI) of the effectiveness of this policy?
Question 28
Which of the following is NOT true for effective risk communication?
Question 29
Which of the following terms is described in the statement below?
"They are the prime monitoring indicators of the enterprise, and are highly relevant and possess a high probability of predicting or indicating important risk."
"They are the prime monitoring indicators of the enterprise, and are highly relevant and possess a high probability of predicting or indicating important risk."
Question 30
Which of the following is the PRIMARY reason to use key control indicators (KCIs) to evaluate control operating effectiveness?
