Practice Test Geeks(CRM) Certified Records Management Practice Test
← All CRM Flashcard Decks

Risk Assessment & Mitigation Flashcards

7 cards from real CRM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Risk Assessment & Mitigation flashcards as text

  1. Which risk assessment methodology assigns numerical values to both the probability and impact of a records-related risk to produce a quantitative risk score?

    Answer: Annualized Loss Expectancy (ALE)

    ALE calculates risk quantitatively by multiplying the Single Loss Expectancy (SLE) by the Annual Rate of Occurrence (ARO).

  2. A records manager discovers that a critical business system has no documented recovery procedure. Which risk treatment option directly addresses this gap?

    Answer: Risk mitigation

    Risk mitigation involves implementing controls—such as creating recovery procedures—to reduce the likelihood or impact of a risk.

  3. Under ISO 15489, which element is considered foundational to a records risk assessment?

    Answer: Identifying records that support business functions

    ISO 15489 emphasizes that risk assessment must begin with identifying records that support core business functions and processes.

  4. An organization's paper records stored in a flood-prone basement represent which type of risk?

    Answer: Physical/environmental risk

    Storing records in a flood-prone area is a physical and environmental risk that threatens the integrity and availability of those records.

  5. Which control is MOST effective at mitigating the risk of unauthorized access to confidential electronic records?

    Answer: Implementing role-based access controls (RBAC)

    RBAC restricts access to records based on a user's role, directly reducing the risk of unauthorized access.

  6. A residual risk is best defined as:

    Answer: The risk remaining after all mitigation controls have been applied

    Residual risk is the level of risk that remains after controls have been implemented, which management must accept or further address.

  7. Which scenario BEST illustrates the risk of record chain-of-custody failure in a legal matter?

    Answer: A litigation hold is issued but records are still purged due to poor communication

    Purging records subject to a litigation hold due to communication failure breaks chain of custody and exposes the organization to spoliation sanctions.