Crisc - Study guides, Class notes & Summaries

Q.No.1 Which of the following is MOST important for an organization that wants to reduce IT operational risk? A. Increasing senior management's understanding of IT operations B. Increasing the frequency of data backups C. Minimizing complexity of IT infrastructure D. Decentralizing IT infrastructure Q.No.2 Deviation from a mitigation action plan's completion date should be determined by which of the following? A. Benchmarking analysis with similar completed projects B. Change manag...

NEW QUESTION 1 - (Exam Topic 3) Which of the following would be a risk practitioner's BEST course of action when a project team has accepted a risk outside the established risk appetite? A. Reject the risk acceptance and require mitigating controls. B. Monitor the residual risk level of the accepted risk. C. Escalate the risk decision to the project sponsor for review. D. Document the risk decision in the project risk register. NEW QUESTION 2 - (Exam Topic 3) Which of the following con...

ISACA : CRISC ACTUAL EXAM