A.Policies, plans and procedures

B.Tools and automation

C.Awareness and communication

D.Availability and accessibility

A.Strengths

B.Weaknesses

C.Tools

D.Opportunities

E.Optimism

F.Threats

A.Require quarterly reports from the providers demonstrating compliance.

B.Exercise the right to perform an audit.

C.Impose monetary penalties for noncompliance.

D.Require documentation that the providers have adequate controls in place.

A.Enterprise risk appetite statement

B.Orientation training materials

C.Enterprise acceptable use policy

D.Employee nondisclosure agreement

A.visualize how the strategy will be achieved.

B.monitor whether the chosen strategy is successful

C.clarify the cause-and-effect relationship of the strategy.

D.demonstrate commitment to IT governance.