nerdexam
(ISC)2(ISC)2

CISSP-ISSMP · Question #180

CISSP-ISSMP Question #180: Real Exam Question with Answer & Explanation

The correct answer is B: A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their. Risk audit is a method to test the overall risk management process and the planned risk responses. A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their root causes, as well as the effectiveness of the risk management proce

Security Audit Management

Question

Management has asked you to perform a risk audit and report back on the results. Bonny, a project team member asks you what a risk audit is. What do you tell Bonny?

Options

  • AA risk audit is a review of all the risks that have yet to occur and what their probability of happening are.
  • BA risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their
  • CA risk audit is a review of all the risk probability and impact for the risks, which are still present in the project
  • DA risk audit is an audit of all the risks that have occurred in the project and what their true impact on cost

Explanation

Risk audit is a method to test the overall risk management process and the planned risk responses. A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their root causes, as well as the effectiveness of the risk management process. Answer option D is incorrect. This defines quantitative analysis of the risk events have occurred. Answer options A and C are incorrect. These define risk analysis, part of project risk management planning. Guide), Fourth Edition, ISBN.9781933890517, Section 11.6.2.2.

Topics

#Risk Audit#Risk Management#Audit Definition#Security Auditing

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP PracticeBrowse All CISSP-ISSMP Questions