Risk Governance and Frameworks Flashcards
6 cards from real CRISC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Risk Governance and Frameworks flashcards as text
COBIT 2019 supports CRISC practitioners PRIMARILY by providing which capability?
Answer: A governance and management framework for enterprise IT
COBIT 2019 provides an enterprise IT governance and management framework that aligns IT objectives with business goals and risk management.
Which risk governance document defines the boundaries within which business units must manage their risk?
Answer: Risk policy
A risk policy establishes the organization's overall approach, boundaries, and mandates for how risk must be managed across all business units.
A company's IT risk governance structure is WEAK when which condition exists?
Answer: Risk decisions are made without senior management involvement
When risk decisions lack senior management involvement, governance is weak because strategic alignment and accountability are absent.
Which principle is MOST critical when integrating IT risk management into corporate governance?
Answer: Alignment of IT risk with business objectives
IT risk management must be aligned with business objectives to ensure governance decisions support the organization's overall strategic direction.
In a risk governance framework, the risk owner is BEST described as the person who:
Answer: Is accountable for managing the risk to acceptable levels
The risk owner is accountable for ensuring a specific risk is managed within acceptable levels and that appropriate controls are in place.
Which characteristic distinguishes a mature IT risk governance program from an immature one?
Answer: Risk management is proactive and integrated into decision-making
Mature IT risk governance integrates risk considerations proactively into all business decisions rather than reacting to incidents after the fact.