A.Change control procedures

B.Regular risk repotting

C.Risk monitoring processes

D.Incident monitoring activities

A.Assesses the availability and compatibility a backup hardware

B.Provides a low-cost method of assessing the BCP's completeness

C.Ensures that appropriate follow-up work is performed on noted issues

D.Allows for greater participation be management and the IT department

A.a threat assessment.

B.an asset classification.

C.a vulnerability assessment.

D.an impact assessment.

A.Provide information security awareness training to service provider staff.

B.Review the service providers' information security policies and procedures.

C.Conduct regular vulnerability assessments on the service providers' IT systems.

D.Perform regular audits on the service providers' applicable controls.

A.Business impact analysis (MA)

B.Heat map

C.Key performance indicators (KPIs)

D.Balanced scorecard