CSL Cybersecurity Governance & Risk Management 2

Question 1

Which risk treatment option involves transferring the financial consequences of a risk to a third party?

Accepted Answer

Risk transfer

Answer

Risk transfer shifts financial liability to a third party, typically through cyber insurance or outsourcing.

Question 2

A CISO discovers a critical vulnerability but patching it would require a 12-hour system outage. Which governance document typically guides the escalation decision?

Accepted Answer

Risk Appetite Statement

Answer

A Risk Appetite Statement defines the organization's tolerance for risk and guides decisions when trade-offs between risk and operations arise.

Question 3

What is the primary purpose of a Board-level Cybersecurity Committee?

Accepted Answer

Providing executive oversight and accountability for cyber risk

Answer

Board-level committees ensure that cybersecurity is governed with appropriate executive accountability and strategic oversight.

Question 4

In the context of risk management, what does 'residual risk' mean?

Accepted Answer

The risk that remains after all controls are applied

Answer

Residual risk is the remaining exposure after all mitigation controls have been applied to the inherent risk.

Question 5

Which framework specifically focuses on IT governance and aligns IT goals with business objectives?

Accepted Answer

COBIT

Answer

COBIT (Control Objectives for Information and Related Technologies) is designed to align IT governance with enterprise business goals.

(CSL) Cybersecurity Leadership Certification Practice Test

(CSL) Cybersecurity Leadership Certification Practice Test

CSL Cybersecurity Governance & Risk Management 2