MENU
KLO is a major quoted car rental company The company is considering publishing its first cyber risk management report
AH rental bookings are made online Customers receive a booking reference number that they use to collect their cars from a convenient branch Customers enter their credit card details both so that KLO can take payment for their rental and also so that the customers can be charged automatically for late returns or damage to cars
KLO's management believes that it has three key areas of cyber risk Cyber criminals may wish to make bookings using fictitious data in order to steal KLO's cars, they may wish to use customers details to identify addresses of people who are away from home so that they can burgle houses and they may wish to abuse customer credit card details
KLO's Board is concerned that admitting to the nsk of stealing cars might encourage cnminals to exploit that vulnerability AJso. it is concerned that customers will be reluctant to rent cars if that would mean that their homes could be at risk of burglary while they are away The vulnerability of credit card details seems obvious and so the Board is not reluctant to admit to that.
Which TWO of the following are correct?
Suggested Answer: A, C
Get Premium CIMAPRO19-P03-1 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
DE
Derick
11 months ago
The accountant will catch any omissions, no doubt about that.
AD
Adela
11 months ago
Wait, are they really worried about burglars targeting homes? That seems extreme!
JA
Jaleesa
11 months ago
I agree, they should highlight their security measures too.
ED
Edna
12 months ago
Not sure if customers will really care about the risks if they feel safe renting.
CA
Carrol
12 months ago
KLO definitely needs to be transparent about their risks!
SH
Sharan
1 year ago
I recall a practice question where stakeholders were concerned about vulnerabilities, so E doesn't seem right; they definitely care about those risks.
DA
Danica
1 year ago
I think C could be correct because an independent accountant usually wants a complete picture of risks before signing off on anything.
DA
Dallas
1 year ago
I'm not entirely sure, but I feel like if the Board leaves out concerns, the accountant might still catch it. So, B seems a bit risky to choose.
ST
Stefany
1 year ago
I remember discussing the importance of transparency in risk management reports, so I think A makes sense about being clear on sensitive information and controls.
PR
Precious
1 year ago
I'm leaning towards options A and C. The accountant will likely want a full picture of the risks, and the report should balance transparency with highlighting the company's security measures.
SO
Son
1 year ago
Hmm, I'm not sure about the role of the independent accountant here. I'll need to think carefully about how that impacts the reporting.
LA
Laurene
1 year ago
The Board's concerns about admitting certain vulnerabilities are understandable, but I think it's important to be transparent about all the cyber risks.
GL
Glendora
1 year ago
This question seems straightforward, but I want to make sure I understand the key issues before selecting my answers.
BR
Brianne
1 year ago
The best approach is to focus on the robust controls in place, as option A suggests. Stakeholders will care more about effective risk management than just listing vulnerabilities.
IL
Iluminada
2 years ago
I bet the accountant will be signing the report with one hand while holding a baseball bat in the other, just in case the Board tries any funny business.
ST
Stephaine
2 years ago
The Board is worried about burglars targeting people's homes while they're renting cars? Sounds like they need to start a home security business too!
GL
Glory
2 years ago
C) The independent accountant who will express an opinion on the risks and controls will be unwilling to sign the report unless it contains a full account of all risks and controls
BI
Billy
2 years ago
B) If KLO's Board omits one of more areas of concern from the report then the independent accountant who will sign the report is unlikely to discover that omission
VE
Veronika
2 years ago
A) The Board should be clear about all sensitive information that the company holds, but should also be clear about the robust controls in place to safeguard that information.
JU
Julianna
2 years ago
E is just ridiculous. Stakeholders will definitely care about the vulnerabilities. A and C are the way to go.
KA
Katy
2 years ago
Yes, C is crucial too. The independent accountant will want a full account of all risks and controls before signing the report.
QU
Queenie
2 years ago
I think A is important, the Board should be clear about sensitive information and the controls in place.
KA
Kara
2 years ago
I agree, stakeholders will definitely care about the vulnerabilities.
VE
Veronika
2 years ago
D? Really? The accountant won't just accept what the Board says, they'll dig deeper. Gotta go with A and C.
JO
Jolene
2 years ago
Yeah, the accountant will definitely dig deeper and not just rely on what the Board says. A and C seem like the correct options.
JA
Jade
2 years ago
I think the independent accountant will definitely want a full account of all risks and controls before signing the report.
AN
Annice
2 years ago
I agree, the Board should be transparent about the sensitive information they hold and the controls in place.
LE
Lelia
2 years ago
But what if the Board omits some areas of concern? Will the accountant still sign the report?
AD
Adell
2 years ago
I agree with Buck. It's important for stakeholders to know that their information is protected.
BU
Buck
2 years ago
I think the Board should be clear about all sensitive information and the controls in place.
AN
Anika
2 years ago
I agree with A, but I'm not sure about C. Surely the accountant can't force the Board to disclose something they're not comfortable with.
LO
Louvenia
2 years ago
But can the accountant really force the Board to disclose everything they're uncomfortable with?
JE
Jeannetta
2 years ago
The independent accountant may not sign off on the report if it doesn't cover all risks and controls.
SH
Shanice
2 years ago
I agree, it's important for stakeholders to know how the company is safeguarding their data.
MA
Maybelle
2 years ago
I think the Board should be transparent about all sensitive information and also highlight the controls in place.
DE
Delila
2 years ago
A and C seem like the correct answers. The Board should be transparent about the risks, and the independent accountant should require a full account of the risks and controls.
DO
Domonique
2 years ago
C) The independent accountant who will express an opinion on the risks and controls will be unwilling to sign the report unless it contains a full account of all risks and controls
MA
Major
2 years ago
A) The Board should be clear about all sensitive information that the company holds, but should also be clear about the robust controls in place to safeguard that information.