Loading demo links...
Showing 1–12 of 12 questions
What is the primary purpose of a governance, risk, and compliance program?
Select an option, then click Submit answer.
Which framework structures the authorization process used heavily in CGRC practice?
Select an option, then click Submit answer.
CORRECT TEXT
The NIST RMF begins with the ______ step, which establishes organizational risk management processes before systems are categorized.
Answer is in the explanation below.
Who bears ultimate accountability for accepting the risk of operating a system?
Select an option, then click Submit answer.
Which are recognized security governance frameworks? (Choose two.)
Select all that apply, then click Submit answer.
What does a risk management strategy define at the organizational level?
Select an option, then click Submit answer.
In the SDLC, when should security and privacy first be integrated?
Select an option, then click Submit answer.
DRAG DROP
Match each role to its responsibility.
Items to match: Authorizing Official role, Chief Information Security Officer, System Owner role, Control Assessor role.
Answer is in the explanation below.
Which document records the strategy for continuously managing organizational risk?
Select an option, then click Submit answer.
Which activities support an effective compliance program? (Choose two.)
Select all that apply, then click Submit answer.
Which factors shape the scope of a system? (Choose two.)
Select all that apply, then click Submit answer.
DRAG DROP
Match each tailoring activity to its meaning.
Items to match: Scoping guidance application, Compensating control substitution, Parameter value assignment, Control enhancement addition.
Answer is in the explanation below.
