Exam 12: The Risk Intelligent Enterprise: Enterprise Risk Management

arrow
  • Select Tags
search iconSearch Question
  • Select Tags

________ are controls embedded in business processes where a majority of security breaches occur.

Free
(Short Answer)
4.7/5
(91)
Correct Answer:
Verified

Application controls

Match the ERM component name to the appropriate definition. -Monitoring

Free
(Multiple Choice)
4.8/5
(74)
Correct Answer:
Verified

D

At the top management level, ________ IT controls provide IT governance that sets the tone from the top of the enterprise.

Free
(Short Answer)
4.8/5
(83)
Correct Answer:
Verified

entity-level

How can IT build sustainability into IT controls?

(Essay)
4.9/5
(79)

Which ERM objective relates to the goals that support a corporation's mission?

(Multiple Choice)
4.7/5
(93)

What are four internal events that may pose a risk to an enterprise's ability to achieve objectives? Provide examples.

(Essay)
4.8/5
(85)

Application controls are controls over IT services, such as networks and database systems.

(True/False)
4.7/5
(79)

Which ERM component is comprised of policies and procedures established and implemented to ensure risk responses are effective?

(Multiple Choice)
4.9/5
(78)

Focusing on sustainable operations increases the risk of dependence on dwindling natural resources that may become cost prohibitive in the future.

(True/False)
4.7/5
(81)

Given the impossibility of foreseeing every conceivable control to address all threats, risk management uses the approach of assessing risk to determine the probability of risk, its frequency, and its impact.

(True/False)
4.9/5
(82)

A silo approach with separate departments developing separate security programs without consideration of comprehensive risk management can prove to be very effective.

(True/False)
4.7/5
(84)

In the context of enterprise risk management, ________ refers to the process of monitoring an entity's enterprise risk management.

(Short Answer)
4.8/5
(93)

What are the four risk response categories? Include a definition of each.

(Essay)
4.8/5
(67)

Effective implementation of ERM requires a robust discussion of the potential impact of not mitigating risks and the likelihood that the risk will impact the organization.

(True/False)
4.9/5
(87)

Which of the following is NOT one of the 4Ts of risk management?

(Multiple Choice)
4.8/5
(77)

________ practices offer a solution to reduce risk.

(Short Answer)
4.8/5
(73)

Which risk time frame relates to tactics, such as new projects that initiate change?

(Multiple Choice)
4.9/5
(84)

The risk time frame ________ relates to the organization's strategy, affecting three to five years or longer.

(Short Answer)
5.0/5
(70)

Identifying, assessing, and mitigating risks has not been shown to produce better business performance.

(True/False)
4.9/5
(82)

In ERM risk assessment, ________ may refer to assessing likelihood using a quantitative measure, such as percentages.

(Short Answer)
4.9/5
(84)
Showing 1 - 20 of 108
close modal

Filters

  • Essay(0)
  • Multiple Choice(0)
  • Short Answer(0)
  • True False(0)
  • Matching(0)