GRC Section 7 Quiz

Test

Jugadas 1

Crear copia

Sobre esta actividad

GRC training questions/answers

Creada por

ciera

Estados Unidos

Descarga la versión para jugar en papel

Top 10 resultados

#	Jugador	Acierto	tiempo
1	ciera 23 de Abril de 2026	% 85	16:02

¿Quieres aparecer en el Top 10 de este juego? Inicia sesión para identificarte.

Crea tu propio juego gratis desde nuestro creador de juegos

Compite contra tus amigos para ver quien consigue la mejor puntuación en esta actividad

Crear reto

Verbos irregulares en Inglés

Hélmer González Serrano

Colombia

(311)

Se presentan 10 preguntas, cada una con 4 opciones de respuesta. Seleccione la que considere correcta.
Cultura general española

Ernest Serret

España

(100)

Responde las siguientes preguntas
cuanto sabes de Futbol

hugo estay

Chile

(316)

este test esta basado en las diapositivas que pudimos ver con anterioridad, consta de 10 preguntas las cuales tienen alternativas para poder resolverlas.
Brawl stars preguntas

Carlos Andrés Prieto Rodríguez

Colombia

(164)

Completa todas las preguntas
Tipos de sintagmas (II)

idoia rubio

España

(945)

Actividades interactivas para reconocer los distintos tipos de sintagmas

		%
	Anónimo	%
		%
		%

Imprime tu juego

GRC Section 7 Quiz


GRC Section 7 QuizVersión en línea GRC training questions/answers por ciera 1 Before identifying any data or model risk, what must be clearly defined? a Existing controls b Risk score thresholds c Business objective and decision being supported 2 A stakeholder says ‘we’ve always used this data.’ What is the BEST next question? a What’s the likelihood score? b Is data lineage documented and understood end-to-end? c Has this caused an incident? 3 When should ‘No Expected Risk’ be selected in the template? a When rationale is clearly documented and defensible b When controls exist c When time is limited 4 ISO 27001 supports which two types of risk assessment? a Control-based only b Asset-based and context-based c Technical and legal 5 Inherent risk represents: a Risk before considering controls b Risk after mitigation c Worst‑case risk 6 Residual risk represents: a Accepted risk b Risk remaining assuming controls operate as intended c Risk after audit 7 Strong risk statements should always include: a Cause, risk event, and business impact b Risk scores c Control owners 8 Why does ISO 27001 describe the risk register as a “living document”? a It is reviewed and used for continual improvement b It replaces controls c It is centrally owned 9 SOC 2 focuses on which five trust services criteria? a Confidentiality, Integrity, Access Control, Availability, Compliance b Security, Availability, Reliability, Privacy, Auditing c Security, Availability, Processing Integrity, Confidentiality, Privacy 10 Which regulatory concept is described as ensuring consistency of security controls across supplier networks? a Customer privacy law b Third-party/vendor management and due diligence c Market regulation 11 What is the main purpose of Dora in the EU framework? a Harmonize and regulate cross-sector digital resilience and reporting b Replace ISO 27001 c Limit cross-border data flow 12 A model performs well today, but data inputs are changing rapidly. What risk should be explored next? a ongoing monitoring risk b data ownership risk c audit readiness risk 13 Which question best tests whether controls are actually operating, not just designed? a Are controls documented? b Are controls mentioned in policy? c How often are the controls executed and reviewed? 14 When should a risk be escalated beyond the immediate assessment group? a When the risk exceeds appetite b When documentation is incomplete c When controls are manual 15 Which two major player standards are described as complementary for information security controls? a PCI DSS and SOC 2 b ISO 27001 and ISO 27002 c HIPAA and GDPR 16 Which of the following is a required early decision in the template? a Whether controls exist b Whether to escalate c Whether this is a Data, Model, or combined assessment 17 According to Section 7, when should risk assessments be refreshed? a Only during audits b At least annually c Only after incidents 18 Information security risk assessments should focus on which three core attributes of information? a Confidentiality, Integrity, and Availability b Quality, usability, and accessibility c Security, compliance, and cost 19 ISO 27001 certifications require surveillance audits because: a Controls change b Regulations require it c Risks continuously evolve 20 ISO 27001 controls should be written as statements of: a Future intent (“shall”) b Current fact (“is implemented”) c Recommendations

Puedes integrar el juego en un LMS compatible con LTI 1.1 o LTI 1.3 como Canvas, Moodle, o Blackboard. De esta manera podrás guardar las puntuaciones automáticamente en el libro de calificaciones de esa plataforma.

GRC Section 7 Quiz

Test

Sobre esta actividad

Creada por

Descarga la versión para jugar en papel

Top juegos

Test

Verbos irregulares en Inglés

Test

Cultura general española

Test

cuanto sabes de Futbol

Test

Brawl stars preguntas

Test

Tipos de sintagmas (II)

GRC Section 7 QuizVersión en línea

por ciera

Before identifying any data or model risk, what must be clearly defined?

A stakeholder says ‘we’ve always used this data.’ What is the BEST next question?

When should ‘No Expected Risk’ be selected in the template?

ISO 27001 supports which two types of risk assessment?

Inherent risk represents:

Residual risk represents:

Strong risk statements should always include:

Why does ISO 27001 describe the risk register as a “living document”?

SOC 2 focuses on which five trust services criteria?

Which regulatory concept is described as ensuring consistency of security controls across supplier networks?

What is the main purpose of Dora in the EU framework?

A model performs well today, but data inputs are changing rapidly. What risk should be explored next?

Which question best tests whether controls are actually operating, not just designed?

When should a risk be escalated beyond the immediate assessment group?

Which two major player standards are described as complementary for information security controls?

Which of the following is a required early decision in the template?

According to Section 7, when should risk assessments be refreshed?

Information security risk assessments should focus on which three core attributes of information?

ISO 27001 certifications require surveillance audits because:

ISO 27001 controls should be written as statements of:

GRC Section 7 Quiz

Test

Sobre esta actividad

Creada por

Descarga la versión para jugar en papel

Top juegos

Test

Verbos irregulares en Inglés

Test

Cultura general española

Test

cuanto sabes de Futbol

Test

Brawl stars preguntas

Test

Tipos de sintagmas (II)

GRC Section 7 QuizVersión en línea

por ciera

Before identifying any data or model risk, what must be clearly defined?

A stakeholder says ‘we’ve always used this data.’ What is the BEST next question?

When should ‘No Expected Risk’ be selected in the template?

ISO 27001 supports which two types of risk assessment?

Inherent risk represents:

Residual risk represents:

Strong risk statements should always include:

Why does ISO 27001 describe the risk register as a “living document”?

SOC 2 focuses on which five trust services criteria?

Which regulatory concept is described as ensuring consistency of security controls across supplier networks?

What is the main purpose of Dora in the EU framework?

A model performs well today, but data inputs are changing rapidly. What risk should be explored next?

Which question best tests whether controls are actually operating, not just designed?

When should a risk be escalated beyond the immediate assessment group?

Which two major player standards are described as complementary for information security controls?

Which of the following is a required early decision in the template?

According to Section 7, when should risk assessments be refreshed?

Information security risk assessments should focus on which three core attributes of information?

ISO 27001 certifications require surveillance audits because:

ISO 27001 controls should be written as statements of:

According to Section 7, when should risk assessments be refreshed?

ISO 27001 certifications require surveillance audits because:

ISO 27001 controls should be written as statements of: