Isaca Updated CRISC Exam Questions and Answers by pablo

Heat map

Business impact analysis (BIA)

Balanced Scorecard

Risk register

Implement controls to bring the risk to a level within appetite and accept the residual risk.

Implement a key performance indicator (KPI) to monitor the existing control performance.

Accept the residual risk in its entirety and obtain executive management approval.

Separate the risk into multiple components and avoid the risk components that cannot be mitigated.

Data owner

Control owner

Risk owner

System owner

Employees do not report IT risk issues for fear of consequences.

Internal IT auditors report to the chief information security officer (CISO).

Employees face sanctions for not signing the organization's acceptable use policy.

The organization has only two lines of defense.