IT-Risk-Fundamentals 試験問題を無料オンラインアクセス

When analyzing l&T-related risk, an enterprise defines likelihood and impact on a scale from 1 to 5, and the scale of impact also defines a range expressed in monetary terms. Which of the following risk analysis approaches has been adopted?

• A.Quantitative approach
• B.Qualitative approach
• C.Hybrid approach

Which of the following is a benefit of using a top-down approach when developing risk scenarios?

• A.Focus at the enterprise level makes it easier to achieve management support.
• B.Identification and assignment of risk ownership for mitigation plans can be done more quickly.
• C.The development process is simplified because it includes only I&T-related events.

Key risk indicators (KRIs) are metrics designed to:

• A.measure current risk levels in comparison to past levels.
• B.be a direct measure of risk for each business line.
• C.alert there is an increased chance of exceeding risk appetite.

A business continuity plan (BCP) is:

• A.a methodical plan detailing the steps of incident response activities.
• B.a risk-related document that focuses on business impact assessments (BIAs).
• C.a document of controls that reduce the risk of losing critical processes.

Which of the following is MOST important to ensure when developing key risk indicators (KRIs)?

• A.The KRIs can be added to the risk dashboard report.
• B.KRIs can be applied to multiple risk events.
• C.Each KRI is linked to a specific risk event.