IT Risk Fundamentals Practice Test

IT Risk Fundamentals Practice Test practice questions, page 2 of 3, with answer review and explanations.

Question 6

In the context of enterprise risk management (ERM), what is the overall role of I&T risk management stakeholders?

  1. Stakeholders are accountable for all risk management activities within an enterprise.
  2. Stakeholders set direction and provide support for risk management practices.
  3. Stakeholders are responsible for protecting enterprise assets to achieve business objectives.

Question 7

Which of the following BEST supports a risk-aware culture within an enterprise?

  1. Risk issues and negative outcomes are only shared within a department.
  2. The enterprise risk management (ERM) function manages all risk-related activities.
  3. Risk is identified, documented, and discussed to make business decisions.

Question 8

Which of the following is the BEST indication of a good risk culture?

  1. The enterprise places a strong emphasis on the positive and negative elements of risk.
  2. The enterprise enables discussions of risk and facts within the risk management functions.
  3. The enterprise learns from negative outcomes and treats the root cause.

Question 9

Publishing I&T risk-related policies and procedures BEST enables an enterprise to:

  1. ensure regulatory compliance and adherence to risk standards.
  2. hold management accountable for risk loss events.
  3. set the overall expectations for risk management.

Question 10

Which of the following is MOST important when defining an organization’s risk scope?

  1. Understanding the impacts of the risk environment to the organization
  2. Developing a top-down approach to risk management
  3. Developing requirements for risk reporting to executive management