ExpertEasy1 markMultiple Choice
CPA · Question 74 · Area II: Security
A company uses 'Ransomware' insurance. This is an example of which risk response strategy?
A company uses 'Ransomware' insurance. This is an example of which risk response strategy?
Answer options:
A.
Risk Avoidance
B.
Risk Mitigation
C.
Risk Transfer (Sharing)
D.
Risk Acceptance
How to approach this question
Identify the strategy involving insurance.
Full Answer
C.Risk Transfer (Sharing)✓ Correct
Insurance transfers the financial risk to the carrier.
Common mistakes
Thinking insurance mitigates the technical risk (it only mitigates the financial impact).
Practice the full CPA ISC Practice Exam 2
82 questions · hints · full answers · grading
More questions from this exam
Q01A service organization provides a cloud-based payroll platform where clients access the software ...MediumQ02An auditor is reviewing the backup strategy for a financial institution that requires a Recovery ...HardQ03During a walkthrough of the change management process, an auditor observes that developers have w...MediumQ04An auditor is reviewing a SQL query used to generate a list of active customers for a marketing c...HardQ05Which of the following entities is considered a 'Covered Entity' under the HIPAA Privacy Rule?Medium