BPA BPA Compliance, Auditing & Risk Management 2

Question 1

In BPA risk management, which strategy involves transferring the financial impact of a risk to a third party?

Accepted Answer

Risk transfer

Answer

Risk avoidance

Answer

Risk mitigation

Answer

Risk acceptance

Question 2

A BPA audit finds that a bot has been accessing data beyond its required scope. This violates which security and compliance principle?

Accepted Answer

Least privilege

Answer

Data redundancy

Answer

Defense in depth

Answer

Non-repudiation

Question 3

Which document defines the expectations for how quickly an automated process must be restored after a failure, from a compliance perspective?

Accepted Answer

Recovery Time Objective (RTO) documented in the BCP/DRP

Answer

Business Impact Analysis (BIA)

Answer

User Acceptance Testing plan

Answer

Change Request form

Question 4

For a BPA process that handles payment card data, which compliance standard mandates specific controls?

Accepted Answer

PCI-DSS

Answer

ISO 9001

Answer

NIST 800-53

Answer

COBIT

Question 5

What is the purpose of a compliance matrix in a BPA implementation project?

Accepted Answer

To map each regulatory requirement to specific process controls, verifying coverage

Answer

To track bot execution performance

Answer

To document user training completion

Answer

To schedule system maintenance windows

Question 6

During a BPA audit, the auditor requests evidence of 'control effectiveness.' What type of evidence best demonstrates this?

Accepted Answer

Logs, screenshots, and reports showing that controls functioned as intended over a defined period

Answer

A list of planned future improvements

Answer

Verbal confirmation from the process owner

Answer

Vendor marketing materials