A.Risk scenarios are regularly entered into a risk register.

B.Information security key risk indicators (KRls) are tied to business operations.

C.The information security program was introduced with a thorough business case.

D.Senior management regularly reviews security standards.

A.Demonstrating organizational alignment

B.Emphasizing threats to the organization

C.Referencing control deficiencies

D.Presenting a solution comparison matrix

A.The cause of the incident is discovered and remediated.

B.Forensic evidence is reviewed and provided to law enforcement

C.Breach information is provided to the organization's key stakeholders and users.

D.The incident response team discovers inefficiencies in the recovery process.

A.Data ownership

B.Data monitoring

C.Data custodian

D.Data encryption

A.adhere to legal and regulatory requirements.

B.achieve senior management commitment.

C.ensure alignment with corporate requirements.

D.monitor the effectiveness of controls.