Question 26

If preventive controls cannot be implemented due to technology limitations, which of the following should be done FIRST to reduce risk?
  • Question 27

    An organization's HR department has implemented a policy requiring staff members to take a minimum of five consecutive days leave per year to mitigate the risk of malicious insider activities. Which of the following is the BEST key performance indicator (KPI) of the effectiveness of this policy?
  • Question 28

    Which of the following is NOT true for effective risk communication?
  • Question 29

    Which of the following terms is described in the statement below?
    "They are the prime monitoring indicators of the enterprise, and are highly relevant and possess a high probability of predicting or indicating important risk."
  • Question 30

    Which of the following is the PRIMARY reason to use key control indicators (KCIs) to evaluate control operating effectiveness?