Isaca Updated CRISC Exam Questions and Answers by millie-mae

The primary reason for logging is to provide evidence of activities, ensuring accountability and traceability. This supports investigations, audits, and compliance requirements, aligning with Control Monitoring and Reporting standards.

Warning banners on login screens serve as deterrent controls. Deterrent controls are designed to discourage individuals from attempting unauthorized actions by warning them of potential consequences.

Purpose of Warning Banners

Warning banners provide clear notice to users, both authorized and unauthorized, that their activities may be monitored and that unauthorized access is prohibited.

They serve as a legal disclaimer, which can be crucial in prosecuting unauthorized access attempts.

Effectiveness as a Deterrent Control

The primary function of a warning banner is to deter potential intruders by making them aware of the surveillance and legal implications of unauthorized access.

For authorized users, it reinforces awareness of the organization's security policies and acceptable use agreements.

Comparison with Other Control Types

A. Corrective: These controls are used to correct or restore systems after an incident.

B. Preventive: These controls are designed to prevent security incidents from occurring.

C. Detective: These controls are used to detect and alert about security incidents.

D. Deterrent: These controls are intended to discourage individuals from performing unauthorized activities.

References

Sybex-CISSP-Official-Study-Guide-9-Edition.pdf, p. 829, detailing the role of warning banners as deterrent controls​​.

The most important information for the risk practitioner to communicate to senior management for contract negotiation purposes when the organization wants to transfer risk by purchasing cyber insurance is the current annualized loss expectancy report, as it provides an estimate of the potential financial loss or impact that the organization may incur due to a cyber risk event in a given year, and helps to determine the optimal coverage and premium of the cyber insurance. The other options are not the most important information, as they are more related to the audit, asset, or industry aspects of the cyber risk, respectively, rather than the financial aspect of the cyber risk. References = CRISC Review Manual, 7th Edition, page 111.

Providing assurance on risk management processes is the activity that should only be performed by the third line of defense, because it is the role and responsibility of the independent and objective assurance function, such as internal audit or external audit, to evaluate and report on the effectiveness and efficiency of the risk management processes and controls. The third line of defense is the last layer of the three lines of defense model, which is a framework that defines the roles and responsibilities of different functions and levels within the organization for risk management and control. The first line of defense is the operational management and staff, who are responsible for identifying, assessing, and managing the risks and controls within their areas of responsibility. The second line of defense is the oversight and support functions, such as risk management, compliance, or legal, who are responsible for establishing and monitoring the risk policies, standards, and frameworks, and providing guidance and advice to the first line of defense. The third line of defense is the assurance function, who are responsible for providing independent and objective assurance on the adequacy and effectiveness of the risk management processes and controls, and reporting to the senior management and the board of directors. Operating controls for risk mitigation, testing the effectiveness and efficiency of internal controls, and recommending risk treatment options are all activities that can be performed by the first or second line of defense, but not by the third line of defense, as they are not part of the assurance function. References = Risk and Information Systems Control Study Manual, Chapter 2, Section 2.4.1, page 59