CGRC (CGRC) - ISC2 Exam Questions
Last updated on July 07, 2026
What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply. Response:
Develop DIACAP strategy.
Assign IA controls.
Assemble DIACAP team.
Initiate IA implementation plan.
Register system with DoD Component IA Program.
Conduct validation activity.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
An organization conducts one of the following analyses to determine if their system processes personally identifiable information Response:
Risk Assessment
Business Impact Analysis
Privacy Threshold Analyes (PTA)
Privacy Impact Analysis (PIA)
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
In which of the following phases does the SSAA maintenance take place? Response:
Phase 3
Phase 2
Phase 1
Phase 4
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which of the following parts of BS 7799 covers risk analysis and management? Response:
Part 1
Part 3
Part 2
Part 4
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which role in the security authorization process is responsible for organizational information systems? Response:
IS program manager
Designated authorizing official
Certification agent
User representative
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.