A.Defining roles within the organization related to privacy

B.Developing procedures to monitor the use of personal data

C.Analyzing risks posed by new regulations

D.Designing controls to protect personal data

A.provide solutions for control weaknesses.

B.focus the team on internal controls.

C.conduct interviews to gain background information.

D.report on the internal control weaknesses.

A.business impact analysis (BIA).

B.business continuity plan (BCP).

C.disaster recovery plan (DRP).

D.threat and risk assessment.

A.Statement of work (SOW)

B.Service level agreement (SLA)

C.Privacy agreement

D.Nondisclosure agreement (NDA)

A.Expected time to resolve incidents is not specified.

B.Service management standards are not followed.

C.Metrics are not reported to senior management.

D.Prioritization criteria are not defined.