CRM Risk Assessment & Mitigation 2

Question 1

Which risk assessment methodology assigns numerical values to both the probability and impact of a records-related risk to produce a quantitative risk score?

Accepted Answer

Annualized Loss Expectancy (ALE)

Answer

ALE calculates risk quantitatively by multiplying the Single Loss Expectancy (SLE) by the Annual Rate of Occurrence (ARO).

Question 2

A records manager discovers that a critical business system has no documented recovery procedure. Which risk treatment option directly addresses this gap?

Accepted Answer

Risk mitigation

Answer

Risk mitigation involves implementing controls—such as creating recovery procedures—to reduce the likelihood or impact of a risk.

Question 3

Under ISO 15489, which element is considered foundational to a records risk assessment?

Accepted Answer

Identifying records that support business functions

Answer

ISO 15489 emphasizes that risk assessment must begin with identifying records that support core business functions and processes.

Question 4

An organization's paper records stored in a flood-prone basement represent which type of risk?

Accepted Answer

Physical/environmental risk

Answer

Storing records in a flood-prone area is a physical and environmental risk that threatens the integrity and availability of those records.

Question 5

Which control is MOST effective at mitigating the risk of unauthorized access to confidential electronic records?

Accepted Answer

Implementing role-based access controls (RBAC)

Answer

RBAC restricts access to records based on a user's role, directly reducing the risk of unauthorized access.

(CRM) Certified Records Management Practice Test

(CRM) Certified Records Management Practice Test

CRM Risk Assessment & Mitigation 2