GRCP 無料問題集「OCEG GRC Professional Certification」

（A）Avoid

（B）Control

（C）Share

（D）Accept

（A）Objectives should be based only on financial metrics for each unit or department

（B）Objectives should meet the SMART criteria (Specific, Measurable, Achievable, Relevant, Timebound)

（C）Objectives should only have one timescale, e.g., quarterly, annually, 5 years

（D）Objectives should be sought by a majority of the stakeholder categories for the organization

（A）By measuring changes in the organization's market share and competitive position.

（B）By evaluating the return on investment from undertaking LEARN activities.

（C）By assessing the efficiency of using financial, physical, human, and information capital to learn.

（D）By analyzing the organization's budget allocation and resource utilization.

（A）Laws, rules, regulations, litigation, and judicial or administrative opinions

（B）Market research, customer feedback, and competitive analysis

（C）How the organization's legal department and outside legal counsel coordinate activities

（D）Enforcement actions and litigation against the company

（A）Certainty and effect

（B）Probability and consequence

（C）Likelihood and impact

（D）Accuracy and precision

（A）Inherent Risk

（B）Uncontrolled Risk

（C）Vulnerability

（D）Residual Risk

（A）To ensure that all communication is formal and documented as required by law and regulation

（B）To eliminate informal communications that may provide incorrect information

（C）To address opportunities, obstacles, and obligations by interacting with the right audiences at the right time with the right information and intelligence

（D）To minimize the number of communication channels used within the organization and increase efficiency

（A）Threat

（B）Risk

（C）Obstacle

（D）Harm

（A）To increase the likelihood of favorable events

（B）To establish clear lines of communication within the organization

（C）To establish and enable controls that mitigate potential security threats

（D）To set performance metrics for all actions and controls

（A）Organizational values contribute to acting with integrity by increasing the organization's market share and profitability, which will satisfy shareholders to whom promises were made

（B）Adhering to established organizational values helps create a shared sense of purpose and direction, aligning actions and decisions with the organization's mission and goals

（C）Organizational values contribute to acting with integrity by allowing the organization to bypass certain legal and regulatory requirements

（D）Organizational values contribute to acting with integrity by reducing the likelihood of enforcement actions because the organization is self-regulating

（A）By assessing the impact of organizational culture.

（B）By comparing the capability's performance to industry standards or best practices.

（C）By identifying potential legal and regulatory issues.

（D）By evaluating the effectiveness of risk management campaigns.

（A）The organization should identify legally mandated education, including who must be educated, the content required, the time required, and methods that may be used for each required course.

（B）The organization should conduct a needs assessment to determine the training that will address high- risk situations and develop a training plan for each job or job family.

（C）Regardless of role, everyone in the organization should receive the same curriculum and the same education activities to ensure consistent understanding.

（D）The organization should have an education plan for each target population indicating what they should know about the GRC capability and their responsibilities for GRC activities.

（A）To help subordinate units understand and define ways to contribute to the organization's success, reducing the risk of strategic misalignment and engagement decay

（B）To establish the organization's brand identity and image without conflict

（C）To determine the organization's expansion and growth plans without internal conflict

（D）To ensure that the organization has sufficient staff to take on defined tasks

（A）Resilience measures the organization's ability to recover from financial losses and setbacks

（B）Resilience measures the organization's ability to maintain a positive reputation in the face of public scrutiny

（C）Resilience measures the ability to withstand stress and the capability to align after stress

（D）Resilience measures the durability and longevity of the organization's physical assets

（A）To liaison with people and champions who hold actual power and influence in each stakeholder group

（B）To create a network of stakeholders who can promote the organization's brand

（C）To ensure that stakeholders receive special privileges and benefits

（D）To gather intelligence on the activities and plans of competing organizations who have some of the same stakeholders

（A）To implement Bloom's Taxonomy in the education program.

（B）To evaluate the current skill level of the workforce.

（C）To create a helpline for anonymous reporting and asking questions.

（D）To develop a plan that is tailored to the specific needs of each audience.

（A）Skill Set

（B）Educational Needs

（C）Skill Gap

（D）Learning Objective

（A）To assess any damage done to the company from non-compliance

（B）To ensure that all employees adhere to the company's code of conduct

（C）To slow down or decrease the impact of unfavorable events and return the organization to its original, stable, or superior state after harm has occurred

（D）To ensure that unfavorable events do not affect the profitability of the organization

（A）Condition

（B）Impact

（C）Effect

（D）Consequence

（A）Climate and natural resources

（B）Organizational procurement, vendor selection, and contract negotiation for hazardous waste disposal

（C）Organizational performance metrics, goal setting, and progress tracking regarding climate-related projects

（D）Organizational response to new carbon emission regulations