CRISC Question 320

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  A. Resource expenditure against budget Measuring the progress of a risk response action plan requires assessing how well the plan is being executed against predetermined expectations. Monitoring resource expenditure against the budget provides a tangible metric that indicates whether the plan is progressing within its allocated resources and financial constraints. If the expenditure is consistently above budget, it might indicate that the plan's execution is not going as intended, and adjustments may be needed. Conversely, if the expenditure is well below budget, it might either suggest efficient progress or potential delays in executing certain aspects of the plan.

• Chose D1

  D. continuous data backup controls. The best recommendation to further reduce the impact of ransomware attacks would be to implement "D. continuous data backup controls." Ransomware attacks can encrypt an organization's data, rendering it inaccessible until a ransom is paid. Continuous data backup controls ensure that copies of critical data are regularly and automatically backed up to a secure location. In the event of a ransomware attack, the organization can restore its data from backups without needing to pay the ransom.

• Chose D1

  For sure