Risk Management CCT Practice Questions (Page 8)

Questions 36–39

1. 36foundation · easy

   How does risk management contribute to business continuity planning?

   • ABy identifying potential threats and vulnerabilities that could interrupt critical operations
   • BBy replacing the need for a business continuity plan
   • CBy focusing only on financial risks
   • DBy guaranteeing that no disruptions will occur
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What does the Single Loss Expectancy (SLE) formula calculate?

   • AThe cost of implementing a security control
   • BThe total loss expected over a year
   • CThe annual probability of a risk occurring
   • DThe expected loss each time a specific risk occurs
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company has implemented a risk management program aligned with ISO 31000. During a quarterly review, the risk manager notices that a previously identified risk has changed significantly due to a new regulatory requirement. What is the most appropriate action?

   • AWait until the annual risk assessment to update the risk register.
   • BIgnore the change because the risk was already assessed.
   • CRemove the risk from the register because the regulatory change makes it obsolete.
   • DUpdate the risk register with the new likelihood and impact, and communicate the change to stakeholders.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company has implemented a risk management program and identified a new risk: a critical vendor may go out of business. The risk manager has added this to the risk register. What is the most important next step in the continuous risk monitoring process?

   • ARemove the risk from the risk register because it is unlikely to occur.
   • BIgnore the risk until the next annual risk assessment.
   • CSchedule periodic reviews of the vendor's financial health and update the risk register accordingly.
   • DImmediately terminate the contract with the vendor to eliminate the risk.
   Reveal Solution Discussion Select an answer first