Which types of controls are designed to avoid undesirable events, errors, and other adverse occurrences?

1. A. Corrective controls
2. B. Detective controls
3. C. Preventive controls

Correct Answer: C

For risk reporting to adequately reflect current risk management capabilities, the risk report should be based on the enterprise:

1. A. risk management framework.
2. B. risk profile.
3. C. risk appetite.

Correct Answer: B

Risk analysis makes it easier to communicate impact in terms of:

1. A. criticality of I&T assets.
2. B. lost productivity.
3. C. reputational damage.

Correct Answer: A

Which of the following is the GREATEST benefit of effective asset valuation?

1. A. It protects the enterprise from paying more for protection than the net worth of the asset.
2. B. It assures that asset valuation is consistently applied to all assets across the enterprise.
3. C. It ensures assets are linked to processes and classified based on business value.

Correct Answer: C

Which of the following risk response strategies involves the implementation of new controls?

1. A. Mitigation
2. B. Avoidance
3. C. Acceptance

Correct Answer: A