Standards Enforcement GCIP Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A compliance manager is designing an internal controls program to ensure ongoing compliance with CIP standards. The program must be able to detect deviations quickly and allow for corrective action. Which combination of controls is most effective for this purpose?

   • AAnnual audits and no formal corrective action process
   • BAutomated monitoring with weekly manual reviews and a documented corrective action process
   • CManual checks performed only when a new system is added
   • DA single annual self-assessment
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A compliance manager is evaluating the effectiveness of internal controls for a CIP standard. The controls include automated monitoring, quarterly self-assessments, and an annual external audit. The manager wants to identify any gaps in the control framework. Which approach is most effective for this evaluation?

   • ACompare the controls against the requirements and test their operation
   • BReview the automated monitoring logs only
   • CAsk the internal audit team for their opinion without testing
   • DRely solely on the annual external audit results
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A compliance team is evaluating its internal controls for a CIP standard. The team has a control that is supposed to prevent unauthorized changes to BES Cyber Systems, but a recent audit found that the control failed in a specific scenario. The team must decide how to address this finding. What is the most effective response?

   • ARemove the control because it failed once
   • BDocument the failure and wait for the next audit
   • CBlame the failure on an external vendor
   • DConduct a root cause analysis and update the control to address the failure scenario
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A utility is designing an internal control framework to ensure ongoing compliance with CIP standards. They have a limited budget and must choose between implementing a SIEM system for log monitoring or conducting quarterly manual access reviews. Which option is more effective for detecting unauthorized access?

   • AImplement the SIEM system because it provides continuous monitoring.
   • BConduct quarterly access reviews because they are cheaper.
   • CRely on the existing firewall logs and review them annually.
   • DImplement both, but only if the budget allows.
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A compliance team is using the Reliability Standards Auditor Worksheet to prepare for an audit. They notice that the worksheet includes a column for 'Evidence Location' and another for 'Control Owner'. The team is unsure how to fill these columns. What is the best practice for completing the worksheet?

   • AProvide a specific file path or document reference and the name of the person responsible for that control
   • BProvide a general description of the evidence without a specific location
   • CList the control owner's email address only
   • DLeave the columns blank and provide verbal explanations during the audit
   Reveal Solution Discussion Select an answer first