ODP 3 COMPLETE QUESTIONS AND
CORRECT ANSWERS BUNDLED LEARNING
RESOURCE
●● Incident Response Plan
Answer: A plan that defines the action steps, involved resources and
communication strategy upon identification of a threat or potential threat
event, such as a breach in security protocol, power or
telecomunnications outage, severe weather or workplace violence.
●● Control Self-Assessment
Answer: A technique used to internally assess the effectiveness of risk
management and control processes.
●● Business Continuity Strategy
Answer: Comprehensive strategies to recover, resume and maintain all
critical business functions.
●● Technical Controls
Answer: Controls to prevent and detect unauthorized activity.
●● Procedures
,Answer: Defines the manner in which an organization will proceed,
perform or affect something to accomplish the objectives of a policy.
●● Title 31 of the Code of Federal Regulation (CFR) Part 370
Answer: Governs the handling of payments for the Bureau of Public
Debt made through the ACH Network.
●● Unfair, Deceptive or Abusive Acts or Practices (UDAAP)
Answer: Law to protect consumers purchasing financial products and
services requiring that consumers have access to information that lets
them choose the option they believe is best for their situation.
●● Risk Evaluation
Answer: Process of comparing risk analysis results to determine if risk is
at an acceptable level.
●● Business Impact Analysis (BIA)
Answer: Process of identifying the potential impact of uncontrolled,
non-specific events on an institution's business processes.
●● Enterprise Risk Management
Answer: Process of planning, organizing, leading and controlling the
activities of an organization to minimize the effects of risk on that
organization.
, ●● Risk Measurement
Answer: Process to determine the likelihood of an adverse event or
threat occurring and the potential impact of such an event on the
institution.
●● User Access Controls
Answer: Security technique used to regulate who or what can view or
use resources in a computing environment.
●● Vulnerability Assessment
Answer: Systematic examination of systems to identify, quantify and
prioritize the security deficiencies of the systems.
●● Function Drill/Parallel Test
Answer: Testing method involves actual mobilization of personnel to
other sites attempting to establish communications and perform actual
recovery processing as outlined in the business continuity plan (BCP).
●● Risk Management
Answer: Total process required to identify, control and minimize the
impact of uncertain events.
●● Layered Security
CORRECT ANSWERS BUNDLED LEARNING
RESOURCE
●● Incident Response Plan
Answer: A plan that defines the action steps, involved resources and
communication strategy upon identification of a threat or potential threat
event, such as a breach in security protocol, power or
telecomunnications outage, severe weather or workplace violence.
●● Control Self-Assessment
Answer: A technique used to internally assess the effectiveness of risk
management and control processes.
●● Business Continuity Strategy
Answer: Comprehensive strategies to recover, resume and maintain all
critical business functions.
●● Technical Controls
Answer: Controls to prevent and detect unauthorized activity.
●● Procedures
,Answer: Defines the manner in which an organization will proceed,
perform or affect something to accomplish the objectives of a policy.
●● Title 31 of the Code of Federal Regulation (CFR) Part 370
Answer: Governs the handling of payments for the Bureau of Public
Debt made through the ACH Network.
●● Unfair, Deceptive or Abusive Acts or Practices (UDAAP)
Answer: Law to protect consumers purchasing financial products and
services requiring that consumers have access to information that lets
them choose the option they believe is best for their situation.
●● Risk Evaluation
Answer: Process of comparing risk analysis results to determine if risk is
at an acceptable level.
●● Business Impact Analysis (BIA)
Answer: Process of identifying the potential impact of uncontrolled,
non-specific events on an institution's business processes.
●● Enterprise Risk Management
Answer: Process of planning, organizing, leading and controlling the
activities of an organization to minimize the effects of risk on that
organization.
, ●● Risk Measurement
Answer: Process to determine the likelihood of an adverse event or
threat occurring and the potential impact of such an event on the
institution.
●● User Access Controls
Answer: Security technique used to regulate who or what can view or
use resources in a computing environment.
●● Vulnerability Assessment
Answer: Systematic examination of systems to identify, quantify and
prioritize the security deficiencies of the systems.
●● Function Drill/Parallel Test
Answer: Testing method involves actual mobilization of personnel to
other sites attempting to establish communications and perform actual
recovery processing as outlined in the business continuity plan (BCP).
●● Risk Management
Answer: Total process required to identify, control and minimize the
impact of uncertain events.
●● Layered Security
