GRC IRMI - Final Day Prep

Who can move a control to Monitor state? (select two)

• A. Compliance Manager

• B. Risk Manager

• C. Compliance User

• D. Compliance Admin

What tables are extended using the document table in GRC, select 3.

• Citation

• Authority Document

• Risk

• Risk Framework

• Policy

What is the state of an Automatically created risk response task?

• A. Work In Progress

• B. Draft

• C. Closed

• D. Cancelled

Manual factors are used to build out an advanced risk assessment. Which options do you have when associating manual factors? Select 3 answers.

• A. Can be associated with a residual assessment

• B. Can be associated with avendor risk assessment

• C. Can be associated with a control effectiveness assessment

• D. Can be associated with a policy exception request

• E. Can be associated with a inherent assessment

What method is used to create Dependency model for Entity Classes in GRC?

• A. Entity tiers

• B. CI Class manager

• C. CSDM

• D. GRC Workbench

What is the relationship table that relates Risks to controls?

• sn_risk_m2m_risk_control

• sn_compliance_risk_control

• sn_compliance_m2m_risk_control

• sn_grc_m2m_risk_control

What can a risk manager do to a risk in Assess state? Select 2

• A. Retire a risk

• B. Delete the risk

• C. Move it back to draft

What happens when a record has been marked as confidential? Select 2

• A.  Users in the ‘not allowed’ users list are blocked from access to the record.

• B. Owners manager is auto-assigned read access

• C. The user who enabled the confidential options is auto-appended to the ‘Allowed users’ list

• D Users in the ‘allowed users’ list have access to the record

Identify the Policy Record Lifecycle.

• A. Draft >> Review >> Published

• B. Draft >> Review >> Approval >> Published

• C. Draft >> Review >> Awaiting Approval >> Published 
>> Retired

• D. Draft >> Review >> Contributors >> Published

What choices for calculating scoring logic are available on both qualitative and quantitative when either is chosen as the Assessment contribution for an inherent assessment?

• A.    Sum, Minimum, Maximum, Weighted Average, Product, Script

• B.    Sum, Minimum, Maximum, Average, Product, Script

• C.    Sum, Minimum, Maximum, Weighted Average, Product