Answers Graded A
Preventive Control - -A mitigating information that lets them choose the option they
technique designated to prevent an event from believe is best for their situation.
occurring.
Risk Evaluation - -Process of comparing
Incident Response Plan - -A plan that risk analysis results to determine if risk is at an
defines the action steps, involved resources and acceptable level.
communication strategy upon identification of a
threat or potential threat event, such as a breach
in security protocol, power or telecomunnications Business Impact Analysis (BIA) - -Process
outage, severe weather or workplace violence. of identifying the potential impact of uncontrolled,
non-specific events on an institution's business
processes.
Control Self-Assessment - -A technique
used to internally assess the effectiveness of risk
management and control processes. Enterprise Risk Management - -Process of
planning, organizing, leading and controlling the
activities of an organization to minimize the
Business Continuity Strategy - - effects of risk on that organization.
Comprehensive strategies to recover, resume
and maintain all critical business functions.
Risk Measurement - -Process to determine
the likelihood of an adverse event or threat
Technical Controls - -Controls to prevent occurring and the potential impact of such an
and detect unauthorized activity. event on the institution.
Procedures - -Defines the manner in which User Access Controls - -Security technique
an organization will proceed, perform or affect used to regulate who or what can view or use
something to accomplish the objectives of a resources in a computing environment.
policy.
Vulnerability Assessment - -Systematic
Title 31 of the Code of Federal Regulation (CFR) examination of systems to identify, quantify and
Part 370 - -Governs the handling of prioritize the security deficiencies of the systems.
payments for the Bureau of Public Debt made
through the ACH Network.
Function Drill/Parallel Test - -Testing
method involves actual mobilization of personnel
Unfair, Deceptive or Abusive Acts or Practices to other sites attempting to establish
(UDAAP) - -Law to protect consumers communications and perform actual recovery
purchasing financial products and services processing as outlined in the business continuity
requiring that consumers have access to plan (BCP).
, APRP Questions Test Questions with 100% Verified
Answers Graded A
ECI - Electronically Created Item - -A
Risk Management - -Total process check that never appears in paper form.
required to identify, control and minimize the
impact of uncertain events.
Originator - -A company or individual that
has been authorized by the Receiver to initiate
Layered Security - -Use of different either a credit or debit ACH entry to their account.
controls at different points in a transaction
process.
Business Continuity Plan (BCP) - -A
comprehensive written plan to maintain or
Tabletop Exercise/Structured Walk-Through Test resume business in the event of a disruption.
- -Testing method ensures critical
personnel from all areas are familiar with the
business continuity plan (BCP) and may be used Encryption - -A data security technique that
as an effective training tool. encodes information so that data appears as a
meaningless string of letters and symbols during
delivery or transmission.
Walk-Through Drill/Simulation Test - -
Testing method used to apply a specific event
scenario to the business continuity plan (BCP). Test Plan - -A document based on the
institution's test scope and objectives and
includes various test methods.
Payroll Card Account - -A bank account
established directly or indirectly by an employer
on behalf of an employee to which an RDFI - Receiving Depository Financial Institution
employee's wages are electronically transferred - -A financial instituion that receives ACH
to. entries from the ACH Operator and posts the
entries to the accounts of its depositors.
Credit Card - -A card indicating the holder
has been granted a line of credit to make ODFI - Originating Depository Financial
purchases or withdraw cash up to a prearranged Institution - -A financial institution that
ceiling. receives payment instructions from Originators
and forwards the entries to the ACH Operator.
Prepaid/Stored Value Card - -A card-
based payment system that assigns a value to Exposure Limits - -A method used to
the card; some cards can be "reloaded" through mitigate credit risk, required by the ACH Rules
various methods and others are designed to be
discarded.
Debit Card - -A payment card issued to a
person for purchasing goods and services