CRISC Risk Governance and Frameworks 2

Question 1

COBIT 2019 supports CRISC practitioners PRIMARILY by providing which capability?

Accepted Answer

A governance and management framework for enterprise IT

Answer

COBIT 2019 provides an enterprise IT governance and management framework that aligns IT objectives with business goals and risk management.

Question 2

Which risk governance document defines the boundaries within which business units must manage their risk?

Accepted Answer

Risk policy

Answer

A risk policy establishes the organization's overall approach, boundaries, and mandates for how risk must be managed across all business units.

Question 3

A company's IT risk governance structure is WEAK when which condition exists?

Accepted Answer

Risk decisions are made without senior management involvement

Answer

When risk decisions lack senior management involvement, governance is weak because strategic alignment and accountability are absent.

Question 4

Which principle is MOST critical when integrating IT risk management into corporate governance?

Accepted Answer

Alignment of IT risk with business objectives

Answer

IT risk management must be aligned with business objectives to ensure governance decisions support the organization's overall strategic direction.

Question 5

In a risk governance framework, the risk owner is BEST described as the person who:

Accepted Answer

Is accountable for managing the risk to acceptable levels

Answer

The risk owner is accountable for ensuring a specific risk is managed within acceptable levels and that appropriate controls are in place.

CRISC - Certified in Risk and Information Systems Control Practice Test