A.Privacy training and awareness program for employees

B.Industry practice and regulatory compliance guidance

C.Policies and procedures consistent with privacy guidelines

D.Information security and incident management practices

A.review the working papers with the auditee.

B.distribute a summary of general findings to the members of the auditing team

C.provide a report to senior management prior to discussion with the auditee.

D.provide a report to the auditee stating the initial findings.

A.Detection risk

B.Business risk

C.Controls risk

D.Compliance risk

A.Maintenance costs were not included in the project lifecycle costs.

B.Benefits as stated in the business case have not been realized.

C.Workarounds due to remaining defects had to be used longer than anticipated.

D.The system has undergone several change requests to further extend functionality.

A.To identify the users of information systems and processes

B.To develop a detailed desertion of information systems and processes

C.To avoid the costs resulting from the failure of key systems and processes

D.To establish business uns prioritization of systems projects, and strategies