New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CIMAPRO19-P03-1 Exam - Topic 1 Question 81 Discussion

Actual exam question for CIMA's CIMAPRO19-P03-1 exam
Question #: 81
Topic #: 1
[All CIMAPRO19-P03-1 Questions]

KLO is a major quoted car rental company The company is considering publishing its first cyber risk management report

AH rental bookings are made online Customers receive a booking reference number that they use to collect their cars from a convenient branch Customers enter their credit card details both so that KLO can take payment for their rental and also so that the customers can be charged automatically for late returns or damage to cars

KLO's management believes that it has three key areas of cyber risk Cyber criminals may wish to make bookings using fictitious data in order to steal KLO's cars, they may wish to use customers details to identify addresses of people who are away from home so that they can burgle houses and they may wish to abuse customer credit card details

KLO's Board is concerned that admitting to the nsk of stealing cars might encourage cnminals to exploit that vulnerability AJso. it is concerned that customers will be reluctant to rent cars if that would mean that their homes could be at risk of burglary while they are away The vulnerability of credit card details seems obvious and so the Board is not reluctant to admit to that.

Which TWO of the following are correct?

Show Suggested Answer Hide Answer
Suggested Answer: A, C

Contribute your Thoughts:

0/2000 characters
Derick
3 months ago
The accountant will catch any omissions, no doubt about that.
upvoted 0 times
...
Adela
3 months ago
Wait, are they really worried about burglars targeting homes? That seems extreme!
upvoted 0 times
...
Jaleesa
3 months ago
I agree, they should highlight their security measures too.
upvoted 0 times
...
Edna
4 months ago
Not sure if customers will really care about the risks if they feel safe renting.
upvoted 0 times
...
Carrol
4 months ago
KLO definitely needs to be transparent about their risks!
upvoted 0 times
...
Sharan
4 months ago
I recall a practice question where stakeholders were concerned about vulnerabilities, so E doesn't seem right; they definitely care about those risks.
upvoted 0 times
...
Danica
4 months ago
I think C could be correct because an independent accountant usually wants a complete picture of risks before signing off on anything.
upvoted 0 times
...
Dallas
4 months ago
I'm not entirely sure, but I feel like if the Board leaves out concerns, the accountant might still catch it. So, B seems a bit risky to choose.
upvoted 0 times
...
Stefany
5 months ago
I remember discussing the importance of transparency in risk management reports, so I think A makes sense about being clear on sensitive information and controls.
upvoted 0 times
...
Precious
5 months ago
I'm leaning towards options A and C. The accountant will likely want a full picture of the risks, and the report should balance transparency with highlighting the company's security measures.
upvoted 0 times
...
Son
5 months ago
Hmm, I'm not sure about the role of the independent accountant here. I'll need to think carefully about how that impacts the reporting.
upvoted 0 times
...
Laurene
5 months ago
The Board's concerns about admitting certain vulnerabilities are understandable, but I think it's important to be transparent about all the cyber risks.
upvoted 0 times
...
Glendora
5 months ago
This question seems straightforward, but I want to make sure I understand the key issues before selecting my answers.
upvoted 0 times
...
Brianne
5 months ago
The best approach is to focus on the robust controls in place, as option A suggests. Stakeholders will care more about effective risk management than just listing vulnerabilities.
upvoted 0 times
...
Iluminada
1 year ago
I bet the accountant will be signing the report with one hand while holding a baseball bat in the other, just in case the Board tries any funny business.
upvoted 0 times
...
Stephaine
1 year ago
The Board is worried about burglars targeting people's homes while they're renting cars? Sounds like they need to start a home security business too!
upvoted 0 times
Glory
1 year ago
C) The independent accountant who will express an opinion on the risks and controls will be unwilling to sign the report unless it contains a full account of all risks and controls
upvoted 0 times
...
Billy
1 year ago
B) If KLO's Board omits one of more areas of concern from the report then the independent accountant who will sign the report is unlikely to discover that omission
upvoted 0 times
...
Veronika
1 year ago
A) The Board should be clear about all sensitive information that the company holds, but should also be clear about the robust controls in place to safeguard that information.
upvoted 0 times
...
...
Julianna
1 year ago
E is just ridiculous. Stakeholders will definitely care about the vulnerabilities. A and C are the way to go.
upvoted 0 times
Katy
1 year ago
Yes, C is crucial too. The independent accountant will want a full account of all risks and controls before signing the report.
upvoted 0 times
...
Queenie
1 year ago
I think A is important, the Board should be clear about sensitive information and the controls in place.
upvoted 0 times
...
Kara
1 year ago
I agree, stakeholders will definitely care about the vulnerabilities.
upvoted 0 times
...
...
Veronika
1 year ago
D? Really? The accountant won't just accept what the Board says, they'll dig deeper. Gotta go with A and C.
upvoted 0 times
Jolene
1 year ago
Yeah, the accountant will definitely dig deeper and not just rely on what the Board says. A and C seem like the correct options.
upvoted 0 times
...
Jade
1 year ago
I think the independent accountant will definitely want a full account of all risks and controls before signing the report.
upvoted 0 times
...
Annice
1 year ago
I agree, the Board should be transparent about the sensitive information they hold and the controls in place.
upvoted 0 times
...
...
Lelia
1 year ago
But what if the Board omits some areas of concern? Will the accountant still sign the report?
upvoted 0 times
...
Adell
1 year ago
I agree with Buck. It's important for stakeholders to know that their information is protected.
upvoted 0 times
...
Buck
1 year ago
I think the Board should be clear about all sensitive information and the controls in place.
upvoted 0 times
...
Anika
1 year ago
I agree with A, but I'm not sure about C. Surely the accountant can't force the Board to disclose something they're not comfortable with.
upvoted 0 times
Louvenia
1 year ago
But can the accountant really force the Board to disclose everything they're uncomfortable with?
upvoted 0 times
...
Jeannetta
1 year ago
The independent accountant may not sign off on the report if it doesn't cover all risks and controls.
upvoted 0 times
...
Shanice
1 year ago
I agree, it's important for stakeholders to know how the company is safeguarding their data.
upvoted 0 times
...
Maybelle
1 year ago
I think the Board should be transparent about all sensitive information and also highlight the controls in place.
upvoted 0 times
...
...
Delila
1 year ago
A and C seem like the correct answers. The Board should be transparent about the risks, and the independent accountant should require a full account of the risks and controls.
upvoted 0 times
Domonique
1 year ago
C) The independent accountant who will express an opinion on the risks and controls will be unwilling to sign the report unless it contains a full account of all risks and controls
upvoted 0 times
...
Major
1 year ago
A) The Board should be clear about all sensitive information that the company holds, but should also be clear about the robust controls in place to safeguard that information.
upvoted 0 times
...
...

Save Cancel