GRC Section 7 Quiz

Test

Parties jouées 1

Créer une copie

À propos de cette activité

GRC training questions/answers

Créé par

ciera

United States

Téléchargez la version pour jouer sur papier

Top 10 résultats

#	Jeux	Précision	temps
1	ciera 24 Avril 2026	% 85	16:02

Voulez-vous apparaître dans le Top 10 de ce jeu? Connectez-vous pour vous identifier.

Créez votre propre jeu gratuite à partir de notre créateur de jeu

Affrontez vos amis pour voir qui obtient le meilleur score dans ce jeu

Créer un défi

Spanish Alphabet Listening

Falkenberg Falkenberg

United States

(88)

Spanish alphabet, listening-based assessment
Tissues - Practice Quiz

Benjamin D Morgan

United States

(16)

Tissues - Practice Quiz
Photosynthesis vs Cellular Respiration - Practice Quiz

Benjamin D Morgan

United States

(39)

Photosynthesis vs Cellular Respiration - Practice Quiz
Practice Quiz - Punnett Square, Variation, and Mutations

Benjamin D Morgan

United States

(14)

Practice Quiz - Punnett Square, Variation, and Mutations
UPS 5 Seeing Habits Quiz

Heather Bell

United States

(12)

Test your knowledge about the 5 seeing habits discussed in the text 'UPS 5 seeing habits'.

		%
	Anonyme	%
		%
		%

Imprimez votre jeu

GRC Section 7 Quiz


GRC Section 7 QuizVersion en ligne GRC training questions/answers par ciera 1 Before identifying any data or model risk, what must be clearly defined? a Existing controls b Risk score thresholds c Business objective and decision being supported 2 A stakeholder says ‘we’ve always used this data.’ What is the BEST next question? a What’s the likelihood score? b Is data lineage documented and understood end-to-end? c Has this caused an incident? 3 When should ‘No Expected Risk’ be selected in the template? a When rationale is clearly documented and defensible b When controls exist c When time is limited 4 ISO 27001 supports which two types of risk assessment? a Control-based only b Asset-based and context-based c Technical and legal 5 Inherent risk represents: a Risk before considering controls b Risk after mitigation c Worst‑case risk 6 Residual risk represents: a Accepted risk b Risk remaining assuming controls operate as intended c Risk after audit 7 Strong risk statements should always include: a Cause, risk event, and business impact b Risk scores c Control owners 8 Why does ISO 27001 describe the risk register as a “living document”? a It is reviewed and used for continual improvement b It replaces controls c It is centrally owned 9 SOC 2 focuses on which five trust services criteria? a Confidentiality, Integrity, Access Control, Availability, Compliance b Security, Availability, Reliability, Privacy, Auditing c Security, Availability, Processing Integrity, Confidentiality, Privacy 10 Which regulatory concept is described as ensuring consistency of security controls across supplier networks? a Customer privacy law b Third-party/vendor management and due diligence c Market regulation 11 What is the main purpose of Dora in the EU framework? a Harmonize and regulate cross-sector digital resilience and reporting b Replace ISO 27001 c Limit cross-border data flow 12 A model performs well today, but data inputs are changing rapidly. What risk should be explored next? a ongoing monitoring risk b data ownership risk c audit readiness risk 13 Which question best tests whether controls are actually operating, not just designed? a Are controls documented? b Are controls mentioned in policy? c How often are the controls executed and reviewed? 14 When should a risk be escalated beyond the immediate assessment group? a When the risk exceeds appetite b When documentation is incomplete c When controls are manual 15 Which two major player standards are described as complementary for information security controls? a PCI DSS and SOC 2 b ISO 27001 and ISO 27002 c HIPAA and GDPR 16 Which of the following is a required early decision in the template? a Whether controls exist b Whether to escalate c Whether this is a Data, Model, or combined assessment 17 According to Section 7, when should risk assessments be refreshed? a Only during audits b At least annually c Only after incidents 18 Information security risk assessments should focus on which three core attributes of information? a Confidentiality, Integrity, and Availability b Quality, usability, and accessibility c Security, compliance, and cost 19 ISO 27001 certifications require surveillance audits because: a Controls change b Regulations require it c Risks continuously evolve 20 ISO 27001 controls should be written as statements of: a Future intent (“shall”) b Current fact (“is implemented”) c Recommendations

Vous pouvez intégrer le jeu dans un LMS compatible avec LTI 1.1 ou LTI 1.3 comme Canvas, Moodle ou Blackboard. Les scores seront ainsi automatiquement enregistrés dans le carnet de notes de la plateforme.

GRC Section 7 Quiz

Test

À propos de cette activité

Créé par

Téléchargez la version pour jouer sur papier

Top Jeux

Test

Spanish Alphabet Listening

Test

Tissues - Practice Quiz

Test

Photosynthesis vs Cellular Respiration - Practice Quiz

Test

Practice Quiz - Punnett Square, Variation, and Mutations

Test

UPS 5 Seeing Habits Quiz

GRC Section 7 QuizVersion en ligne

par ciera

Before identifying any data or model risk, what must be clearly defined?

A stakeholder says ‘we’ve always used this data.’ What is the BEST next question?

When should ‘No Expected Risk’ be selected in the template?

ISO 27001 supports which two types of risk assessment?

Inherent risk represents:

Residual risk represents:

Strong risk statements should always include:

Why does ISO 27001 describe the risk register as a “living document”?

SOC 2 focuses on which five trust services criteria?

Which regulatory concept is described as ensuring consistency of security controls across supplier networks?

What is the main purpose of Dora in the EU framework?

A model performs well today, but data inputs are changing rapidly. What risk should be explored next?

Which question best tests whether controls are actually operating, not just designed?

When should a risk be escalated beyond the immediate assessment group?

Which two major player standards are described as complementary for information security controls?

Which of the following is a required early decision in the template?

According to Section 7, when should risk assessments be refreshed?

Information security risk assessments should focus on which three core attributes of information?

ISO 27001 certifications require surveillance audits because:

ISO 27001 controls should be written as statements of:

GRC Section 7 Quiz

Test

À propos de cette activité

Créé par

Téléchargez la version pour jouer sur papier

Top Jeux

Test

Spanish Alphabet Listening

Test

Tissues - Practice Quiz

Test

Photosynthesis vs Cellular Respiration - Practice Quiz

Test

Practice Quiz - Punnett Square, Variation, and Mutations

Test

UPS 5 Seeing Habits Quiz

GRC Section 7 QuizVersion en ligne

par ciera

Before identifying any data or model risk, what must be clearly defined?

A stakeholder says ‘we’ve always used this data.’ What is the BEST next question?

When should ‘No Expected Risk’ be selected in the template?

ISO 27001 supports which two types of risk assessment?

Inherent risk represents:

Residual risk represents:

Strong risk statements should always include:

Why does ISO 27001 describe the risk register as a “living document”?

SOC 2 focuses on which five trust services criteria?

Which regulatory concept is described as ensuring consistency of security controls across supplier networks?

What is the main purpose of Dora in the EU framework?

A model performs well today, but data inputs are changing rapidly. What risk should be explored next?

Which question best tests whether controls are actually operating, not just designed?

When should a risk be escalated beyond the immediate assessment group?

Which two major player standards are described as complementary for information security controls?

Which of the following is a required early decision in the template?

According to Section 7, when should risk assessments be refreshed?

Information security risk assessments should focus on which three core attributes of information?

ISO 27001 certifications require surveillance audits because:

ISO 27001 controls should be written as statements of:

According to Section 7, when should risk assessments be refreshed?

ISO 27001 certifications require surveillance audits because:

ISO 27001 controls should be written as statements of: