Isaca Updated CRISC Exam Questions and Answers by dania

Do not collect or retain data that is not needed.

Redact data where possible.

Limit access to the personal data.

Ensure all data is encrypted at rest and during transit.

KRIs assist in the preparation of the organization's risk profile.

KRIs signal that a change in the control environment has occurred.

KRIs provide a basis to set the risk appetite for an organization

KRIs provide an early warning that a risk threshold is about to be reached.

Regulatory requirements

Organizational objectives

Annual loss expectancy (ALE)

Risk management costs

possible risk and suggested mitigation plans.

design of controls to encrypt the data to be shared.

project plan for classification of the data.

summary of data protection and privacy legislation.