A.Internal auditor commitment

B.Strong risk management practices

C.Documented policies

D.Supportive corporate culture

A.For entities with regulatory drivers, the two tests must be the same

B.Both are labor-intensive in preparation, planning and execution.

C.The scope of both is determined primarily by the likelihood of exploitation

D.Both utilize a risk-based analysis that considers threat scenarios.

A.Productivity loss

B.Reputational damage

C.Data loss

D.System downtime

A.perform business impact analysis

B.issue an intermediate report to management

C.conduct additional compliance testing

D.evaluate the impact on current disaster recovery capability.

A.The mean recovery time of all applications

B.The critical application with the shortest recovery time objective (RTO)

C.The critical application with the longest recovery point objective (RPO)

D.The application with the most frequent backups