MIS 416 Exam 2/Final (100% Errorless Solutions)

Place the following in the correct order for risk management. A) rank risks B) analyze risks C) identify risk D) treat risks E) monitor and review risks correct answers C B A D E Clear and effective security risk assessment reporting requires that the contents of the report be perceived as (check all that apply) A) unambiguous B) nonthreatening C) accurate D) relevant E) actionable correct answers A B C D Which of the following can affect the state of risks? A) Risk levels of competitors B) Supply Chain changes C) Personnel changes D) Mergers correct answers B C D In addition to the data captured in your risk assessment template, exceptions and mitigation plans need to include the following information EXCEPT: A) Budget Process B) Business justification for the risk C) Mitigation action items, long- and short-term D) Policy exceptions/risk acceptance approval and time frame correct answers A Action plans are a necessary output of the risk assessment process so that recommendations can be acted upon quickly once the assessment is approved. T/F? correct answers T A gap analysis report documents differences between what is mitigated and what is NOT mitigated, resulting in a gap in security. T/F? correct answers T What information should you include in your report for management when you present your recommendations? A) affinity diagram, POAM, and CBA B) stakeholders, key stakeholders, and C-level stakeholders C) recommendation, justification, and procedure D) findings, recommendation cost and time frame, and cost-benefit analysis correct answers D Which of the following is NOT part of a risk report structure? A) Risk Report Memorandum B) Base Report