CGEIT Domain 4 (Additional MCQ)

The MOST important objective of the risk management process is to:

• help IT manage risk more efficiently and effectively

• establish controls to strengthen the risk profile

• conduct control self assessment workshops

• enable successful execution of the corporate strategy

Risk assessment in any software development process should be performed:

• in the requirements stage

• at every stage of software development

• in the design and development stage

• in the testing stage to avoid any potential shortcoming

An enterprise risk management system enables management to:

• enhance the enterprise's capacity to create value

• report on a timely basis

• minimize risk and ensure increased productivity

• select the best risk responses for the enterprises

IT risk associated with the outsourcing of IT services is BEST managed through the:

• creation of multiple sourcing strategies

• Inclusion of controls and service level agreements into contracts

• development of policies and procedures

• performance of due diligence audits

Which of the following decisions involving IT risk are handled at the program level?

• Decisions required to enable implementation of actions

• Decisions about transforming strategy into action

• Decisions on business goals

• Decisions on risk relating to achievement of quality control for IT objectives

The principal objective of an enterprise's risk management process is to protect the enterprise's ability to:

• perform its mission

• protect business and IT assets

• deliver best quality services

• increase profitability

The BEST indication of the maturity of an IT risk management process in an enterprise is that:

• top management is prepared to invest more money into IT security

• employees have an appropriate awareness of risk and are comfortable talking about it

• risk assessment is performed in all areas of IT and business management

• the business and IT are aligned in risk assessment and risk ranking

The FINAL responsibility for risk management rests with the:

• respective business managers

• strategy committee

• board of directors

• IT risk response council

Which of the following is the MOST common area of risk among enterprises?

• Investment financial risk

• Credit risk

• Market risk

• Operational risk

Risk appetite levels of any enterprise are PRIMARILY influenced by:

• risk ranking methodology

• the magnitude multiplied by the probability of risk

• management's culture toward risk

• experts on the risk assessment team