Important CIPS L5M2 Exam Questions

Answer: D

Explanation:

A Cross Functional Team should create a risk register. It shouldn't be the responsibility of one person to do this- more points of view will lead to more risks being identified. Accountability for the Risk Register may however sit with the CEO or a Department Manager. This is explained on p. 132

Answer: A, B

Explanation:

Advantages of ISO28000 are competitive advantage and cost savings. The textbook explains that cost savings come through a reduction in security incidents. For more info on ISO28000 see p. 141

Answer: D

Explanation:

As a consultant he will need Professional Indemnity insurance. This insurance is for roles that include providing advice, designs and services. Insurances comes up a bit in the exam so revise this from p.96-100

Answer: B, C

Explanation:

The correct answers are conduct benchmarking and create a risk assessment. This supplier provides low value and low risk products - therefore the fact they have a bad credit rating isn't too much of a risk to your company. It's worth doing a benchmarking exercise to compare their position to others in the market to see if there are any industry-wide trends, and to create a risk assessment and mitigation plan. This could involve working with the supplier to help them improve their credit score, for example by using more favourable payment terms so they have a better cash flow. There's no need to replace them immediately, and there's no need to tell the CEO- they probably have more important things to think about than a singular supplier of non-critical items See p.81

Answer: C

Explanation:

Sarbanes Oxley Regulations encourages transparency in financial reporting. The regulations came in response to the Enron scandal in 2001 when Enron bosses were falsifying financial records to make the company look better than it was, then the company went bust. The point of Sarbanes Oxley is to ensure that this doesn't happen again- that business leaders report correct financial statements to shareholders. The study guide talks about this on p.42 but I'd recommend also watching this video as it gives a good background to the regulation: https://www.investopedia.com/terms/s/sarbanesoxleyact.asp