CIMA Risk Management 認定 P3 試験問題:

1. Risk management involves all parties in an organisation.
Which of the following describe the Board's responsibilities for risk management?

A) The Board is responsible for considering whether weaknesses in internal controls need to be addressed.
B) The Board is responsible for choosing the least risk products to promote.
C) The Board is responsible for addressing any weaknesses in internal controls.
D) The Board is responsible for safeguarding the company's assets.
E) The Board is responsible for maintaining a robust system of internal controls.

2. Which THREE of the following are key elements of cyber security risk governance?

A) Ensure the organisation has defined structures for cyber security management
B) Ensure all employees have at least two cyber security objectives in their development plans.
C) Ensure all employees have their passwords changed every 30 days.
D) Ensure all employees have anti-virus software on their equipment
E) Ensure the organisation has defined standards of conduct for IT use.
F) Ensure all employees are trained in IT use

3. BCD has set up a number of functions within its security operations centre (SOC) One of these is a Hunt team.
Which of the following is the primary function of a Hunt team?

A) To look for weaknesses in other peoples' systems
B) To look for weaknesses in BCD's cyber security system.
C) To look for signs that BCD's system has been breached
D) To look for solutions in response to threats.

4. W is a construction company which undertakes large projects for governments and other clients worldwide.
Following extensive tendering processes, contracts are issued for successful tenders, and projects typically take three to five years to complete. Contracts are normally fixed-price and many have considerable penalty clauses.
Which of the following would be appropriate policies and controls for W to implement?

A) Contract terms should be worded precisely so that additional work is not deemed to form part of the contract.
B) Ensuring that the minimum legal wage is paid to all workers on the construction sites.
C) Unsuccessful tenders should be analysed to establish the cause of them failing to be awarded the work and help to avoid future failures.
D) In order to ensure the maximum chance of winning the contract, tenders always commit W to completing the work at the lowest possible price and in the shortest possible time.
E) Ensuring a consistent separation of duties between those involved in the preparation of tenders and those involved in the planning of projects.
F) The project steering committee and project board should receive regular project status reports.

5. The internal audit department has just completed an investigation into the HR department's procedures relating to new staff appointments The head of HR is unhappy with the draft report prepared by the lead internal auditor The report lists several cases in which appointments were made despite the fact that one or more of the entity's formal procedures were not followed The head of HR has complained that the internal auditor's comments do not allow for the fact that the HR department's staff members are often very busy and do not always have time to conduct every check.
The internal auditor's comments also reflect a failure to complete documents None of the omissions have led to the appointment of an unsuitable member of staff Which TWO of the following statements reflect an appropriate response by the board of directors to this report?

A) The members of staff responsible for these omissions should be subjected to disciplinary action
B) The errors are immaterial because they did not lead to an inappropriate appointment
C) The procedures should be removed if the HR department staff believe that they are unnecessary
D) The board should be seen to support the internal audit
E) Ignoring a compliance error altogether may undermine the control environment

質問と回答：