Control Design and Implementation CRISC Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following best describes the process for managing issues throughout the risk response lifecycle?

   • AIdentify, document, track, and resolve issues until closure
   • BDocument, analyze, and accept issues without further action
   • CIdentify, escalate, and close issues without documentation
   • DTrack, report, and ignore issues that are not critical
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company has a control requiring all employees to use a company-issued smartphone for business communications. A group of employees in a region where smartphones are not available requests a permanent waiver from this requirement. What is the most appropriate classification and process?

   • AGrant an exception for a limited time
   • BGrant an exemption, document the reason, and review it periodically
   • CDeny the request and require employees to purchase smartphones themselves
   • DIgnore the requirement for that region
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of interpreting control testing results?

   • ATo document the testing process
   • BTo determine if the control is operating effectively
   • CTo justify the cost of testing
   • DTo assign blame for control failures
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a key requirement for managing exceptions to control requirements?

   • AExceptions should be granted without management approval
   • BExceptions should be granted verbally and tracked informally
   • CExceptions should be documented and reviewed periodically
   • DExceptions should be permanent once granted
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Why is communication important during control implementation?

   • ATo avoid the need for training
   • BTo satisfy regulatory requirements
   • CTo document the implementation process
   • DTo ensure that employees understand their roles and responsibilities
   Reveal Solution Discussion Select an answer first