Free Isaca CRISC Exam Questions

Using which of the following one can produce comprehensive result while performing qualitative risk analysis?

As the sensitivity of the monitoring tool has to be changed, therefore it requires optimization of Key Risk Indicator. The monitoring tool which is giving alerts is itself acting as a risk indicator. Hence to change the sensitivity of the monitoring tool to give alert only for critical situations requires optimization of the KRI.

Incorrect Answers:

A, C, D: These options are not relevant to the change of sensitivity of the monitoring tools.

Which of the following phases is involved in the Data Extraction, Validation, Aggregation and Analysis?

An organization has outsourced a critical process involving highly regulated data to a third party with servers located in a foreign country. Who is accountable for the confidentiality of this data?

Which of the following is MOST important to determine when assessing the potential risk exposure of a loss event involving personal data?