Certbie
Question 1 of 30
\"EnigmaCorp, a multinational financial institution, is embarking on a new strategic initiative to expand its digital banking services into emerging markets. This initiative involves significant investments in new technologies, partnerships with local financial institutions, and compliance with diverse regulatory frameworks. The Board of Directors recognizes the inherent risks associated with this expansion, including cybersecurity threats, regulatory uncertainties, and potential reputational damage. However, there is disagreement among senior management regarding the best approach to integrate risk management into the strategic planning process and to effectively engage stakeholders. Some argue for a separate risk assessment exercise after the strategic plan is finalized, while others advocate for a more proactive and integrated approach. Considering the principles of ISO 27005:2022 and best practices in quality management, which of the following approaches would be most effective for EnigmaCorp to ensure the success and sustainability of its digital banking expansion?\"
Integrate risk identification and assessment directly into the strategic planning process, proactively engage stakeholders to understand their risk perceptions and tolerances, and continuously monitor and review both strategic plans and risk management strategies.
Conduct a separate risk assessment exercise after the strategic plan is finalized, focusing primarily on quantifiable risks such as cybersecurity threats and regulatory compliance, and communicate risk mitigation strategies to stakeholders through formal reports.
Delegate risk management responsibilities to individual business units, allowing them to develop their own risk mitigation strategies based on their specific operational contexts, and rely on periodic audits to ensure compliance with organizational risk policies.
Focus primarily on short-term financial performance and market share gains, accepting a higher level of risk in the initial phase of the expansion, and address any emerging risks reactively as they arise, while maintaining minimal communication with stakeholders to avoid unnecessary concerns.

Preparing for ISO 27005:2022 – Information Security Risk Management Lead Risk Manager? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free