Risk Management CRISC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What does an organization's risk profile primarily communicate?

   • AThe organization's overall risk exposure
   • BThe organization's marketing strategy
   • CThe organization's IT system architecture
   • DThe organization's financial statements
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A mid-sized company is choosing a risk management framework. The company has a mature internal control environment and wants to integrate risk management with its existing control processes. The company also wants to align with a framework that is widely recognized by external auditors. Which framework would best meet these requirements?

   • ACOBIT
   • BCOSO ERM framework
   • CNIST Cybersecurity Framework
   • DISO 31000
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a widely recognized risk management framework?

   • APMBOK
   • BITIL
   • CTOGAF
   • DISO 31000
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which line of defense is responsible for providing independent assurance on the effectiveness of risk management?

   • AFirst line of defense
   • BSecond line of defense
   • CExternal auditors
   • DThird line of defense
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How is risk tolerance typically applied in decision-making?

   • AAs a threshold that triggers action when exceeded
   • BAs a fixed percentage of revenue that must be spent on risk mitigation
   • CAs a measure of the organization's ability to recover from a risk event
   • DAs a legal limit that cannot be exceeded
   Reveal Solution Discussion Select an answer first