CRISC Questions With Complete Solutions

CRISC Questions With Complete Solutions

Risk tolerance Quantifies risk appetite




Risk appetite Governance - Broad idea of the amount of risk that an organization is

willing to accept - risk avert, aggressive, neutral




Vulnerability Internal weakness


External lack of protection




Threat Negative risk event that threatens an objective




Risk Likelihood of a threat compromising an asset




Risk Management Activities implemented to direct and control an enterprise in relation to

the risk




Probability Likelihood of evemt

, CRISC Questions With Complete Solutions

Impact How much the output will be affected, how much damage




Secondary risk Created when one risk response creates another risk event




Residual risk What's left over after risk response is applied, must be minimized




Goal of Risk Management Make sure that residual risk is within the risk tolerance set up

by management.




Sources of IT risks Insider threats


Outsider threats

Hardware, resource failures

Vendors

Changing environment, specially in IT




Benefits of Risk Management Better oversight of organizational assets