Online Access Free IT-Risk-Fundamentals Practice Test

Which of the following is MOST important for a risk practitioner to ensure when preparing a risk report?

• A.The risk report should be published for transparency and enterprise risk awareness.
• B.The risk report should be customized to stakeholder expectations.
• C.The risk report should be uniform for all stakeholders to ensure consistency.

Risk impact criteria are PRIMARILY used to:

• A.help establish the enterprise risk appetite.
• B.determine loss associated with specific IT assets.
• C.prioritize the enterprise's risk responses.

An enterprise has initiated a project to implement a risk-mitigating control. Which of the following would provide senior management with the MOST useful information on the project's status?

• A.Risk heat map
• B.Risk report
• C.Risk register

To establish an enterprise risk appetite, an organization should:

• A.establish risk tolerance for each business unit.
• B.normalize risk taxonomy across the organization.
• C.aggregate risk statements for all lines of business.

Which of the following is the MOST important information for determining the critical path of a project?

• A.Specified end dates
• B.Regulatory requirements
• C.Cost-benefit analysis