CRISC 試験問題を無料オンラインアクセス

Which of the following is the BEST metric to demonstrate the effectiveness of an organization's software testing program?

• A.Percentage of applications with defined business cases
• B.Number of incidents resulting from software changes
• C.Percentage of staff completing software development training
• D.Average time to complete software test cases

Following an acquisition, the acquiring company ' s risk practitioner has been asked to update the organization
' s IT risk profile What is the MOST important information to review from the acquired company to facilitate this task?

• A.Internal and external audit reports
• B.Business objectives and strategies
• C.Risk disclosures in financial statements
• D.Risk assessment and risk register

What is the MAIN benefit of using a top-down approach to develop risk scenarios?

• A.It establishes the relationship between risk events and organizational objectives.
• B.It helps management and the risk practitioner to refine risk scenarios.
• C.It uses hypothetical and generic risk events specific to the enterprise.
• D.It describes risk events specific to technology used by the enterprise.

Which of the following is the MOST important risk management activity during project initiation?

• A.Classifying project data
• B.Establishing a risk mitigation plan
• C.Defining key risk indicators (KRIs)
• D.Identifying key risk stakeholders

When an organization is having new software implemented under contract, which of the following is key to controlling escalating costs?

• A.Risk management
• B.Quality management
• C.Problem management
• D.Change management