A.The information security policy has not been updated in the last two years.

B.Senior management was not involved in the development of the information security policy.

C.The information security policy is not aligned with regulatory requirements.

D.A list of critical information assets was not included in the information security policy.

A.Data privacy impact assessment

B.Data quality assessment

C.Cross-border data transfer assessment

D.Security vulnerability assessment

A.To help identify transactions with no segregation of duties

B.To enable the review of large value transactions

C.To assist in performing analytical reviews

D.To efficiently test large volumes of data

A.Adverse findings from internal and external auditors

B.Lack of project portfolio status oversight

C.Lack of alignment of project status reports

D.Inadequate decision-making and prioritization

A.Integration with existing architecture

B.Ease of support and troubleshooting

C.Data correlation and visualization capabilities

D.Ability to contribute to key performance indicator data