Which of the following should be done FIRST when concerns have been identified regarding the financial viability of a potential software supplier?

It has been discovered that multiple business units across an enterprise are using duplicate IT applications and services to fulfill their individual needs. Which of the following would be MOST helpful to address this concern?

Which of the following guides provides risk and value statements to help identify and validate the need to execute each control objective?

Which of the following best describes the identification, analysis, and ranking of risks?

You are the project manager for your company and a new change request has been approved for your project. This change request, however, has introduced several new risks to the project. You have communicated these risk events and the project stakeholders understand the possible effects these risks could have on your project. You elect to create a mitigation response for the identified risk events. Where will you record the mitigation response?