Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

GRC: Risk and Compliance > Implementation Planning 5% > Flashcards

Implementation Planning 5% Flashcards

1
Q
  • Who should be on the core implementation team for a GRC implementation:
    a. Platform experts
    b. Board member
    c. Internal audit
    d. External audit
    e. Risk assessor
    f. CISO
A

a. Platform Experts
c. Internal Audit

(The exam will include CEO, board member as choices - they are stakeholders, not part of implementation.)

Implementer side: 
• SN platform experts
• Risk and compliance experts
• SN developer
• CMDB developer
• UI design team
• Organizational change management
Customer side:
•	Risk and Compliance experts
•	CMDB process owner
•	Foundation data process owners
•	Security operations
•	Internal audit
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Best Practices states that Risk Management should be implemented before Compliance.

a. Yes
b. No

A

b. No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q
  • Which of the following should be considered when estimating the size of an RCI Implementation Project? (select all that apply)
    a. Number of silos that currently manage risk.
    b. How many regulations they want to track
    c. Maturity of current risk process
    d. How much time their GRC business staff has for the project
    e. How much time their ServiceNow staff has for the project
    f. Experience with ServiceNow
A

All:

a. Number of silos that currently manage risk.
b. How many regulations they want to track
c. Maturity of current risk process
d. How much time their GRC business staff has for the project
e. How much time their ServiceNow staff has for the project
f. Experience with ServiceNow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q
  • What is the minimum role that a user must have to approve a Policy?
    a. Compliance User
    b. Compliance Manager
    c. Compliance Admin
A

a. Compliance User

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q
  • What roles can create/update Entity Types?
    a. Compliance User
    b. Compliance Manager
    c. Compliance Admin
    d. Risk User
    e. Risk Manager
    f. Risk Admin
A

b. Compliance Manager
c. Compliance Admin
e. Risk Manager
f. Risk Admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q
  • What role can answer a Risk Assessment?
    a. Does not need a role
    b. Risk User
    c. Compliance user
    d. Compliance Manager
    e. Risk admin
    f. Risk Assessment Creator
    g. Compliance Admin
    h. Risk Manager
A

a. Does not need a role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What role can create a Risk Assessment?

a. Does not need a role
b. Risk User
c. Compliance user
d. Compliance Manager
e. Risk admin
f. Risk Assessment Creator
g. Compliance Admin
h. Risk Manager

A

f. Risk Assessment Creator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q
  • What role can answer a control attestation?
    a. Does not need a role
    b. Risk User
    c. Compliance user
    d. Compliance Manager
    e. Risk admin
    f. Risk Assessment Creator
    g. Compliance Admin
    h. Risk Manager
A

a. Does not need a role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What role can create policies?

a. Does not need a role
b. Risk User
c. Compliance user
d. Compliance Manager
e. Risk admin
f. Risk Assessment Creator
g. Compliance Admin
h. Risk Manager

A

c. Compliance user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What role can approve policies?

a. Does not need a role
b. Risk User
c. Compliance user
d. Compliance Manager
e. Risk admin
f. Risk Assessment Creator
g. Compliance Admin
h. Risk Manager

A

c. Compliance user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What role can submit a control for attestation?

a. Does not need a role
b. Risk User
c. Compliance user
d. Compliance Manager
e. Risk admin
f. Risk Assessment Creator
g. Compliance Admin
h. Risk Manager

A

c. Compliance user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What role can create an issue (risk)?

a. Does not need a role
b. Risk User
c. Compliance user
d. Compliance Manager
e. Risk admin
f. Risk Assessment Creator
g. Compliance Admin
h. Risk Manager

A

b. Risk User

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What role can create an indicator template (risk)?

a. Does not need a role
b. Risk User
c. Compliance user
d. Compliance Manager
e. Risk admin
f. Risk Assessment Creator
g. Compliance Admin
h. Risk Manager

A

h. Risk Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What role can create a policy exception from a control issue?

a. Does not need a role
b. Risk User
c. Compliance user
d. Compliance Manager
e. Risk admin
f. Risk Assessment Creator
g. Compliance Admin
h. Risk Manager

A

c. Compliance user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What role can create retire policies?

a. Does not need a role
b. Risk User
c. Compliance user
d. Compliance Manager
e. Risk admin
f. Risk Assessment Creator
g. Compliance Admin
h. Risk Manager

A

d. Compliance Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Entity Types are assigned to Control Objectives, which generate Controls for every Entity listed in the Entity Type

a. Yes
b. No

A

a. Yes

17
Q

Which of the following statements are true?

a. Entity Owners can be defined at the Entity level, can be automatically applied to Risks and Controls
b. Are generated for an Entity Type from a defined filter
c. If a record no longer meets and Entity Type filter criteria, it will be deactivated (or retired) and the associated risk and controls will be retired
d. None of the above

A

a. Entity Owners can be defined at the Entity level, can be automatically applied to Risks and Controls
b. Are generated for an Entity Type from a defined filter
c. If a record no longer meets and Entity Type filter criteria, it will be deactivated (or retired) and the associated risk and controls will be retired

18
Q

What are the two major pieces of functionality that Advanded Risk provides? (Select all that apply)

a. Risk Events
b. Calculated Risk
c. Indicators
d. Risk Hierarchy

A

a. Risk Events

d. Risk Heirarchy

19
Q
  • Which of the following are considerations for an implementation? Select all that apply.
    a. Will the customer use UCF?
    b. Do they have a set of corporate policies that they can integrate?
    c. Do they have a Risk Register?
    d. How are they currently measuring Risk?
    e. All of the above.
A

e. All of the above

20
Q
  • It is better to start small with an Implementation.
    a. Yes
    b. No
A

a. Yes

GRC: Risk and Compliance (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions