Crisc Chapter 4 - Risk And Control Monitoring And Reporting Questions And Answers 100% Verified A+ Guaranteed

external sources of information {Ans: - media reports - CERT/CIRT - Security company reports - regulatory bodies - Peer organizations}purpose of control monitoring {Ans: verify whether the control is effectively addressing risk, not to see whether the control is working}risk profile changes {Ans: new technology changes to procedures mergers and acquisition changes in customer expectations}KRI repeatability {Ans: must be repeatable and able to measure on a regular basis to show trends and patterns in activity and results}risk profile {Ans: based on the overall risk of the organization in its attentiveness to monitoring the effectiveness of controls, proactivity in identifying and addressing or preventing risk and development of a risk culture}vulnerability assessment {Ans: methodical review of security to ensure that there are no predictable and unaddressed attack vectors that could be used to intentionally or unintentionally compromise the environment - helps understand effectivness of the risk management program and make decisions regarding treatment of identified vulnerability}