Crisc Exam Guide - Chapter 2- Threats And Vulnerabilities

Which organizational role is responsible for determining data sensitivity level, as well as who has access to sensitive data? {Ans: Data owner}Name 3 vulnerabilities that could affect the management of the IT infrastructure within an organization? {Ans: - Failure to meet internal service level agreements - Lack of a service level agreement with a 3rd party - Lack or resources committed to explore new technologies}Name the vulnerability that stems from the business not identifying its critical assets and processes during the continuity management process? {Ans: Failure to perform a business impact analysis.}Name the short-term process primarily concerned with protecting personnel, facilities, and equipment immediately following a disaster or major incident? {Ans: Disaster Recovery}Which of the following terms describes an entity that initiates a threat? {Ans: Threat agent}What element of project management is most affected by the threat of budget cuts to the project? {Ans: Cost}