A.Key risk indicators (KRls)

B.Security maturity assessments

C.Security architecture diagrams

D.Vulnerability scan results

A.Continuous monitoring

B.Layered protection

C.Two-factor authentication

D.Penetration testing

A.Number of published application-recovery plans

B.Ratio of recovery-plan documents to total applications

C.Ratio of tested applications to total applications

D.Ratio of successful to unsuccessful tests

A.Senior management involvement in project prioritization.

B.Results of a comprehensive threat analysis.

C.Defined key performance indicators (KPIs)

D.Projected reduction in risk.

A.Business impact analysis (BIA)

B.Penetration testing

C.Audit and review

D.Threat analysis