Control Design and Implementation CRISC Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company is implementing a new control to require encryption of all laptops. The IT team has been given the task. What is the most important step to ensure successful implementation?

   • AOutsource the implementation to a third party without internal coordination
   • BImmediately enforce the control without prior notice
   • CImplement the control only on new laptops
   • DCommunicate the new policy to all employees and provide training
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the first step in implementing a new control?

   • ADeveloping a detailed implementation plan
   • BCommunicating the control to all employees
   • CIntegrating the control into operations
   • DTesting the control for effectiveness
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What should be done after a control deficiency is identified during testing?

   • AIgnore the deficiency if it is minor
   • BImmediately implement corrective actions without approval
   • CRetest the control without reporting the finding
   • DReport the finding and recommend corrective actions
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which of the following is an example of a control standard?

   • AITIL
   • BISO 27002
   • CPMBOK
   • DTOGAF
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the role of control standards in guiding control implementation?

   • AThey replace the need for management oversight
   • BThey provide a baseline for designing and assessing controls
   • CThey are legally binding for all organizations
   • DThey eliminate the need for risk assessments
   Reveal Solution Discussion Select an answer first