MENU
Which of the following would MOST effectively reduce the potential for inappropriate exposure of vulnerabilities documented in an organization's risk register?
Suggested Answer: A
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
JO
Jospeh
10 months ago
I disagree, I feel like everyone should have some access.
DA
Dalene
11 months ago
Surprised that confidentiality agreements are even an option here.
LA
Laquita
11 months ago
Limiting access to just senior management seems risky.
SH
Shannan
11 months ago
Role-based access is definitely the way to go!
MA
Ma
11 months ago
I think encrypting the risk register is a must.
CH
Chauncey
12 months ago
Requiring confidentiality agreements seems like a good idea, but I don't think it would be as effective as implementing role-based access.
JO
Josue
12 months ago
I'm a bit unsure about encrypting the risk register. It sounds good, but I wonder if it would actually prevent unauthorized access effectively.
CL
Claribel
12 months ago
I remember practicing a question about access controls, and I feel like role-based access is a strong option here. It seems to balance security and usability.
JA
James
1 year ago
I think limiting access to senior management only might not be the best choice. It could lead to a lack of awareness among other staff who need to know about certain risks.
AL
Alesia
1 year ago
Implementing role-based access sounds like a smart way to control who can access the sensitive information. That might be the best approach to reduce the potential for inappropriate exposure.
JO
Jordan
1 year ago
Encrypting the risk register is a good idea, but I'm not sure if that's the most effective solution on its own. I'll need to consider the other options as well.
DA
Dan
1 year ago
Hmm, limiting access to senior management only seems a bit too restrictive. I wonder if there's a more balanced approach that still protects the information.
GA
Gail
1 year ago
This is a tricky one. I'll need to think carefully about the different options and how they could impact the risk of exposure.
MA
Margurite
1 year ago
I'm going with option C. Gotta love that role-based access - it's like a VIP pass for the vulnerability club.
SH
Shaun
1 year ago
Encrypting the risk register? Sounds like a job for the Enigma machine!
TA
Tatum
1 year ago
Option A is like putting a lock on the barn door after the horse has already bolted. Limiting access to senior management won't do much if the register is already compromised.
MA
Malcolm
1 year ago
Requiring users to sign a confidentiality agreement (option D) is a good idea, but it doesn't actually prevent the information from being exposed. It just provides a legal recourse after the fact.
LA
Laurel
1 year ago
Encrypting the risk register (option E) would add an extra layer of protection to prevent unauthorized access.
BR
Brendan
1 year ago
Training employees on handling sensitive information (option C) can help prevent accidental exposure.
TR
Trinidad
1 year ago
Encrypting the risk register (option C) would add an extra layer of security to prevent unauthorized access.
KA
Kate
1 year ago
Regularly updating and reviewing the risk register (option B) can help identify and address vulnerabilities in a timely manner.
TR
Tracey
1 year ago
Implementing access controls (option A) would limit who can view the risk register.
SH
Shawnda
1 year ago
Regularly reviewing and updating the risk register (option B) can help identify and address vulnerabilities.
TA
Tasia
1 year ago
Implementing access controls (option A) would limit who can view the risk register.
MA
Marisha
1 year ago
I'd go with option C. Implementing role-based access ensures that only those who need to see the risk register can access it. That's a more comprehensive solution than just limiting it to senior management.
FR
Frankie
1 year ago
Definitely, it's important to have a system in place that controls who can view the risk register to prevent any inappropriate exposure.
AL
Alton
1 year ago
I agree, limiting access to only those who need it is crucial for protecting the organization's vulnerabilities.
GA
Gail
1 year ago
Option C sounds like a good choice. Role-based access is key to keeping sensitive information secure.
IR
Irving
1 year ago
Hmm, option B seems like the most straightforward way to protect sensitive information. Encrypting the risk register would keep it secure, even if someone gained unauthorized access.
MA
Malcolm
1 year ago
It's important to take all necessary precautions to keep our organization's information secure.
TA
Tamie
1 year ago
Encrypting the risk register would definitely reduce the potential for inappropriate exposure of vulnerabilities.
BR
Brent
1 year ago
I agree, encryption is key in protecting sensitive information from unauthorized access.
RO
Rosina
1 year ago
Option B is definitely the way to go. Encrypting the risk register is a must.
BO
Bobbie
2 years ago
I think encrypting the risk register could also be effective in reducing inappropriate exposure of vulnerabilities.
ON
Ona
2 years ago
I agree with Nenita. Role-based access ensures that only authorized individuals can view the risk register.
NE
Nenita
2 years ago
I think implementing role-based access would be the best option.