A.IT strategy and objectives

B.Business case

C.Project risk matrix

D.Earned value analysis (EVA)

A.Implementing role-based access at the application level

B.Implementing two-factor authentication

C.Restricting access to transactions using network security software

D.Using a single menu for sensitive application transactions

A.System performance

B.Data integrity

C.Control adequacy

D.Business continuity

A.Access to configuration files is restricted.

B.Logs are being collected in a separate protected host.

C.Insider attacks are being controlled.

D.Automated alerts are being sent when a risk is detected.

A.decentralized as close to the user as possible

B.partnered with the IS development team to determine access rights

C.the function reports directly to the IS operations manager.

D.established at a corporate-wide level.