A.determine EUC materiality and complexity thresholds

B.obtains an inventory EUC applications

C.evaluate the organization's EUC policy

D.evaluate EUC threats and vulnerabilities

A.Debugging of implemented changes

B.Audit of implemented changes for the period under review

C.Implementation of managed change approval processes

D.Log review of managed changes

A.Problem records are prioritized based on the impact of incidents

B.Problems are frequently escalated to management for resolution

C.Some incidents are closed without problem resolution.

D.Root causes are not adequately identified

A.The committee does not include any current system administrators.

B.Business executives are not represented on the committee.

C.Resource and priority conflict resolution has been delegated to the project management office

D.The committee has not formally approved the enterprise's IT architecture.

A.No employee awareness training and education program

B.No official charter for the information security management system

C.No periodic assessments to identify threats and vulnerabilities

D.No dedicated security officer