A.Resources are not wasted on risks that are already managed to an acceptable level

B.Risk management governance becomes easier since most risks remain low once mitigated

C.Risk appetite can increase within the organization once the levels are understood

D.Risk budgets are more easily managed due to fewer identified risks as a result of using a methodology

A.Procedural control

B.Management control

C.Technical control

D.Organization control

A.Information Technology Infrastructure Library (ITIL)

B.International Organization for Standardization (ISO) standards

C.National Institute for Standards and Technology (NIST) standard

D.Payment Card Industry Data Security Standards (PCI-DSS)

A.Obtain senior level sponsorship.

B.Conduct a workshop for all end users.

C.Prepare a security budget.

D.Conduct a risk assessment.

A.Evaluating, describing, testing and authorizing

B.Evaluating, purchasing, testing, authorizing

C.Auditing, documenting, verifying, certifying

D.Discovery, testing, authorizing, certifying