CAF-3 · Chapter 17 · Question 3 of 15
An organization uses a specialized Governance, Risk, and Compliance (GRC) software platform to track shifting environmental laws and labor regulations across multiple countries. Which specific category of risk is the ICT system addressing?
Test yourself: pick an answer
Reveal answer & explanation
Correct answer: C) Compliance Risk
Explanation
Compliance risks involve the failure to adhere to laws and regulations, which can result in lawsuits and fines . ICT tools like GRC platforms provide a structured approach to managing these compliance mandates
More Best Practices & Implementation Strategies MCQs
- Q5The IT department regularly uses automated tools like Nessus and OpenVAS to scan the corporate network. What is the primary purpose of…
- Q6How do executive "Dashboards" primarily improve the risk reporting process for top management?
- Q7An organization creates a cross-functional risk management committee with members from Finance, IT, and HR who are located in different…
- Q8A company's network detects that one of its primary web servers is malfunctioning and automatically reroutes all incoming customer traffic…
- Q9Following a minor data breach, the IT security team uses specialized software to trace the attacker's exact entry point and the specific…