Isaca CRISC Certified in Risk and Information Systems Control Exam Practice Test Questions

• Question 1

  Which of the following BEST informs decision-makers about the value of a notice and consent control for the collection of personal information?

  • A comparison of the costs of notice and consent control options
  • Examples of regulatory fines incurred by industry peers for noncompliance
  • A report of critical controls showing the importance of notice and consent
  • A cost-benefit analysis of the control versus probable legal action

  Show Answer Answer: D Next

• Question 2

  When defining thresholds for control key performance indicators (KPIs). it is MOST helpful to align:

  • Information risk assessments with enterprise risk assessments.
  • Key risk indicators (KRIs) with risk appetite of the business.
  • The control key performance indicators (KPIs) with audit findings.
  • Control performance with risk tolerance of business owners.

  Show Answer Answer: B Next

• Question 3

  A control process has been implemented in response to a new regulatory requirement, but has significantly reduced productivity. Which of the following is the BEST way to resolve this concern?

  • Absorb the loss in productivity.
  • Request a waiver to the requirements.
  • Escalate the issue to senior management
  • Remove the control to accommodate business objectives.

  Show Answer Answer: C Next

• Question 4

  The PRIMARY reason to have risk owners assigned to entries in the risk register is to ensure:

  • Risk is treated appropriately
  • Mitigating actions are prioritized
  • Risk entries are regularly updated
  • Risk exposure is minimized.

  Show Answer Answer: A Next

• Question 5

  Which of the following is the MOST appropriate key risk indicator (KRI) for backup media that is recycled monthly?

  • Time required for backup restoration testing
  • Change in size of data backed up
  • Successful completion of backup operations
  • Percentage of failed restore tests

  Show Answer Answer: D Next