*The organization business model includes: Select one: a. Both the objectives and the business processes necessary to achieve these objectives. b. Control effectiveness and risk rating. c. How business processes are structured to achieve the organizations objectives d. The objectives of the organization.

* In risk assessment process, a major upgrade to an important information system would most likely represent a high: Select one: a. other risk factor b. external risk factor c. likelihood of future systems problems d. internal risk factor

*Which of the following is necessary to determine what would constitute a disaster for an organization? Select one: a. File and equipment backup requirements analysis. b. Contingent facility contract analysis. c. Vendor supply agreement an

*The auditor uses process map in risk assessment process. Indicate which of the following symbols in a process map will most likely contain a question: Select one: a. Terminator symbol b. Process symbol c. Decision symbol d. Activity symbol

*In the annual review of the data center of a nationwide mortgage servicing company, the internal audit manager was concerned about the data center not having an adequate contingency plan. The audit manager was especially concerned because the data center was located close to a river that occasionally flooded and in the vicinity of a major railroad and a major highway. Even though floodwaters might not reach the data center, being located adjacent to a river is associated with the risk that in the event of a significant flood Select one: a. Customers might refuse to do business with the company. b. Many customers might fail to make timely p c. Employees might be unable to report for work. d. Expensive equipment might need to be replace

*Risk assessment model plots: Select one: a. Risk impact against control effectiveness. b. Risk impact against risk likelihood. c. Risk impact against control likelihood. d. Risk rating against control effective

* The highest likelihood of a risk using the five categories assessment is called: Select one: a. Probable b. Extreme c. Certain d. Remote