GRC Concepts Quiz

What you'll be asked

1. Which term best describes the process of ensuring that an organization follows the laws, regulations, and industry standards applicable to its business operations?
2. An organization conducts an assessment to identify potential threats to its data and determines the likelihood and impact of those threats. What is this process called?
3. Which of the following is a primary objective of 'Governance' within the GRC framework?
4. A company is required to undergo an independent review of its financial systems to prove it is following security controls. What is this process known as?
5. When an organization decides to accept a specific risk because the cost of mitigating that risk exceeds the potential loss, which risk response strategy are they employing?

Answers and explanations come after you submit.