CRIS 605 COMPREHENSIVE STUDY
GUIDE 2026 FULL QUESTIONS AND
SOLUTIONS GRADED A+
◍ founder of suicidology.
Answer: Edwin Shneidman
◍ Which of the following is MOST important to determine when defining risk
management strategies?.
Answer: Business objectives and operations.While defining risk
management strategies, the risk practitioner needs to analyze the enterprise's
objectives and risk tolerance and define a risk management framework
based on this analysis. Some enterprises may accept known risk, while
others may invest in and apply mitigating controls to reduce risk.
◍ occur for a financial or concrete gain.
Answer: instrumental acts
◍ Management wants to ensure that IT is successful in delivering against
business requirements. Which of the following BEST supports that effort?.
Answer: An internal control system or framework.For IT to be successful in
delivering against business requirements, management should develop an
internal control system that supports its business requirements.
◍ attempt to reduce psychological pain (feelings of depression, guilt,
disempowerment, hopelessness, etc.).
Answer: expressive acts
◍ ___ ___ worldwide commit suicide annually (1 person every 40 seconds).
Answer: 1 million
◍ _____ in the US commit suicide annually (85 people per day).
, Answer: 30-35,000
◍ suicide is the ____ leading cause of death.
Answer: 10th or 11th
◍ ____ to _____ survive a suicide attempt and ____ of survivors are
permanently disabled.
Answer: 300-600,000; 19,000
◍ Who has the highest rate of suicide?.
Answer: caucasian men over 35
◍ Which of the following risk assessment outputs is MOST suitable to help
justify an enterprise information security program?.
Answer: A list of appropriate controls for addressing risk.A list of
information security controls corresponding to risk scenarios identified
during risk assessment is one of the primary deliverables of the risk
assessment exercise. The list demonstrates due consideration of risk and
applicable controls to address the risk and therefore helps justify a program
predicated on risk mitigation.
◍ What age group has had the highest increase in suicides over the past 30
years? What # cause of death?.
Answer: ages 15-24; 2nd leading cause of death
◍ Whether a risk has been reduced to an acceptable level should be
determined by:.
Answer: Enterprise requirements.Enterprise requirements as dictated by
enterprise goals and objectives should determine when a risk has been
reduced to an acceptable level. Information systems and security
requirements and standards may help inform enterprise requirements, but in
themselves lack the critical context of enterprise business goals.
◍ Commitment and support of senior management for information security
investment can BEST be accomplished by a business case that:.
Answer: Ties security risk to enterprise business objectives.Senior
management seeks to understand the business justification for investing in
, security. This can best be accomplished by tying security to key business
objectives.
◍ 25% of suicides occur in people over __ years of age.
Answer: 65
◍ ____ ____ may see suicide as a means of relieving dishonor, shame, or
humiliation from oneself or one's family.
Answer: eastern cultures
◍ The PRIMARY reason for developing an enterprise security architecture is
to:.
Answer: Align security strategies among the functional areas of an
enterprise and external entities. The enterprise security architecture must
align strategies and objectives of diverse functional areas within the
enterprise, optimize the flow of information within an enterprise, and
support all required communication with external partners, customers and
suppliers.
◍ ___ ___ commonly see suicide as a sin - "self-murder".
Answer: western cultures
◍ Which of the following signifies the need to review an enterprise's risk
practices?.
Answer: Business owners regularly challenge risk assessment findings. An
enterprise's risk management practices must be clearly understood and
supported by business stakeholders. This principle must be documented in
the enterprise's risk management policy/framework/plan with senior
management approval and direction. Business owners who challenge the
risk assessment findings either do not support the findings or do not
understand them clearly.
◍ Suicide when someone else provides the means (lethal agent), but the person
who is dying administers it..
Answer: assisted suicide
◍ It is the practice of intentionally ending a life in order to relieve pain and
GUIDE 2026 FULL QUESTIONS AND
SOLUTIONS GRADED A+
◍ founder of suicidology.
Answer: Edwin Shneidman
◍ Which of the following is MOST important to determine when defining risk
management strategies?.
Answer: Business objectives and operations.While defining risk
management strategies, the risk practitioner needs to analyze the enterprise's
objectives and risk tolerance and define a risk management framework
based on this analysis. Some enterprises may accept known risk, while
others may invest in and apply mitigating controls to reduce risk.
◍ occur for a financial or concrete gain.
Answer: instrumental acts
◍ Management wants to ensure that IT is successful in delivering against
business requirements. Which of the following BEST supports that effort?.
Answer: An internal control system or framework.For IT to be successful in
delivering against business requirements, management should develop an
internal control system that supports its business requirements.
◍ attempt to reduce psychological pain (feelings of depression, guilt,
disempowerment, hopelessness, etc.).
Answer: expressive acts
◍ ___ ___ worldwide commit suicide annually (1 person every 40 seconds).
Answer: 1 million
◍ _____ in the US commit suicide annually (85 people per day).
, Answer: 30-35,000
◍ suicide is the ____ leading cause of death.
Answer: 10th or 11th
◍ ____ to _____ survive a suicide attempt and ____ of survivors are
permanently disabled.
Answer: 300-600,000; 19,000
◍ Who has the highest rate of suicide?.
Answer: caucasian men over 35
◍ Which of the following risk assessment outputs is MOST suitable to help
justify an enterprise information security program?.
Answer: A list of appropriate controls for addressing risk.A list of
information security controls corresponding to risk scenarios identified
during risk assessment is one of the primary deliverables of the risk
assessment exercise. The list demonstrates due consideration of risk and
applicable controls to address the risk and therefore helps justify a program
predicated on risk mitigation.
◍ What age group has had the highest increase in suicides over the past 30
years? What # cause of death?.
Answer: ages 15-24; 2nd leading cause of death
◍ Whether a risk has been reduced to an acceptable level should be
determined by:.
Answer: Enterprise requirements.Enterprise requirements as dictated by
enterprise goals and objectives should determine when a risk has been
reduced to an acceptable level. Information systems and security
requirements and standards may help inform enterprise requirements, but in
themselves lack the critical context of enterprise business goals.
◍ Commitment and support of senior management for information security
investment can BEST be accomplished by a business case that:.
Answer: Ties security risk to enterprise business objectives.Senior
management seeks to understand the business justification for investing in
, security. This can best be accomplished by tying security to key business
objectives.
◍ 25% of suicides occur in people over __ years of age.
Answer: 65
◍ ____ ____ may see suicide as a means of relieving dishonor, shame, or
humiliation from oneself or one's family.
Answer: eastern cultures
◍ The PRIMARY reason for developing an enterprise security architecture is
to:.
Answer: Align security strategies among the functional areas of an
enterprise and external entities. The enterprise security architecture must
align strategies and objectives of diverse functional areas within the
enterprise, optimize the flow of information within an enterprise, and
support all required communication with external partners, customers and
suppliers.
◍ ___ ___ commonly see suicide as a sin - "self-murder".
Answer: western cultures
◍ Which of the following signifies the need to review an enterprise's risk
practices?.
Answer: Business owners regularly challenge risk assessment findings. An
enterprise's risk management practices must be clearly understood and
supported by business stakeholders. This principle must be documented in
the enterprise's risk management policy/framework/plan with senior
management approval and direction. Business owners who challenge the
risk assessment findings either do not support the findings or do not
understand them clearly.
◍ Suicide when someone else provides the means (lethal agent), but the person
who is dying administers it..
Answer: assisted suicide
◍ It is the practice of intentionally ending a life in order to relieve pain and
